use the new secret_key_base approach