Move InvalidSecret error; borrow Secret specs from Fernet