note use of box and secretbox