Only users within devices group and admins can generate new secrets.