accept arg for max secrets