so about that publicly available SECRET_KEY...