s/secret/_secret in migration