set secret default to be an empty string