I think it would be best to document somewhere that people have to change those secrets