Mention that secrets should be synced manually

Closes #1