Should not be able to read the secret text from another site.