I'm pretty sure you have to share your secrets in order for them to do their work. They learn all the requests that were meant for your server's eyes only.