# X_SECRETS_KEY_ACL_FAILED

## Means

key file ACL not owner-only

## Typical cause

on Windows, icacls refused to cut the new key file ACL to the current account, so no key was written

## Fix

`where.exe icacls` — then whoami; or keep no key file and set ULTIMATE_SECRETS_KEY

[Core and runtime](/error-codes#core-and-runtime)