Form validation as a secret