bump default secret length just because
1.0.3