move SecretBox key function to Internal + allow unKey