should get user secret value instead of a array