add documentation about shared secrets