start work on pulling a secret key from the server