hard crash if secret is in config