fixes to make_secret