secret key exposed