[WIP] Don't insecurely handle config.secret's absence

[strugee]

It's much better to just error so the admin fixes it instead of doing something stupid on our own that nobody wants (should want).