Change refresh to secret