This makes me think that we should set the default secret in each repo to the same value.