better way to handle secret thigns