Right, exactly. (I did mean to say &quot;server&quot;, thanks.) It sounds like the secrets in question are essentially analogous to OpenSSH private keys: they allow a server &#x2F; service to prove its own identity to others, and the servers should be able to launch automatically at boot so there&#x27;s not a reasonable place to enter a passphrase.