fix criteria on explicitly no secret