If you mean "how we're generating" them, then I think we should update the configuration files with comments here, or in the `loop/config.js` file.

Could you point me at best practices as how to generate these secrets?