secret directory configuration