correct docs for GET /secret/:key