the default state of a workspace is secret