The secret key goes only to the oh CLI running on this machine, which checks it and then sends it to Onehouse over TLS.
oh
$bucket