rework secret validation; keep address current