point to $secret_key