This secret should probably be bcrypted, since a secret might as well be a password.