secret header value: redacted