tag todo
dead comment
only allow download of cards with secret