hard crash if secret is in config

@rfk r?