use original query; don't add secret