Only admins who know the private secret can generate a link.