Use the configured Person secret. It is sent only to this Runtime and is never stored in browser storage.