Secret key is loaded on the client only when needed and removed from DOM when hidden