cache/stable: links for secret-reader