secret is required