It would be in that repeatedly hitting the URL will not have any effects, other than disabling them the first time.
But yeah, auto-link followers will invalidate them immediately. There's a case to be made for that being a good thing, but don't want to get into that.
Also, you couldn’t send such a secret to, say, Gmail.