The secure is a bunch of environment variables encrypted with a key specific to the repository. One is needed for each repository which needs to access the secure stuff.