Secret data keys

Secret keys must be in a DNS subdomain.