always cast secret to uppercase