Merge "AuthSecret: make method oneway"