add test for bad secret format