Why are apps requiring us to enter our nsec when it's supposed to remain secure?