Parent page
Read secretKey from different Origin:
Read secretKey from the same Origin:
Cookie SOP (Fail if different origin)
Read from iframe: