ensure that a secret key exists