secret key encryption + uri scheme