how unsafe are secrets in the checkpoint?