couldn't the storage be aware of the secret so that you don't need to pass the two values here?