Need to clearly document and establish user profiles vs provider profiles for secrets