document to setup secret