Do you think it might be reasonable to try to generate and store a secret key file here, and fail if it doesn't work?