network: add CancelSecret