var secret = process.env.SOME_LONG_UNGUESSABLE_STRING; userSchema.plugin(encrypt, { secret: secret });