We discussed that earlier and decided that because the secrets are used for things other than just patching XML files (ops tasks, worker role stuff, etc.), we would end up having to maintain two lists. I doubt we will ever be able to use XDT for this stuff.