root/public: links for secret-reader