set_unless for auth secret