I had a quick question about how the enrollment secrets are handled. Are they stored in the database not expected to change? Is there a way to specify them via config?