pass in secret for cipher