I did like the old way to authenticate. Go to plugin`s preferences and check each others fingerprint, that way it`s really secure. The new "secret" is quite confusing, yes. A "password" would make more point, but however, I find it best to check the fingerprint.