Secrets
Server-only credentials for pollers and data feeds.
Where values live and who can see them.
- Values live on the server, in a per-page file beside the page itself; deleting the last secret removes the file.
- They are never sent to the browser, never included in a saved page, and never in an SSE frame.
- A probe runs server-side precisely so the substituted request never exists client-side.
- Agents can see that a secret exists and reference it by name; they cannot read the value.