Shared secret

Set once. Stored in a cookie on this device.