Move userName responsibility to callers of writeDerivation.
Check the secretDerivation property to make the derivation secret.