Plain text shared secrets problematic?