fix secret usage