add secret validation