One secret, shared by both operators.
Set on the server, in the environment. No page here can change it.