provider secret is using