In theory we could move these to the config with ``secret=True``, but I doubt they will change or need to be user-overidable.