switch secrets from web app to native app format