pub fn generate_random_secret() -> SecretString