move scope and secret utils to own modules
Cancel should cancel instead of allow :-D