we both need get_secret and get_credential