'autoGenerateSecretKey' mention removed from upgrade note about `Security`