This could be interpreted in two ways:

(a) The entire spark deployment, including the master/workers and all applications, must share the same secret.

(b) The standalone cluster (master and workers) must all share a secret and all applications must share a secret, but these need not be the same.

Maybe change the wording a bit to make it more clear? I'm not sure which of these it is.