secret in example file upload