use secret based authentication
include secret in store object