It would be great if the secret_key goes through a time consuming hashing algorithm like bcrypt.