Split loading of the secret from the decoding process in security.py
so we can reuse the decoding process for other things