[cbsmith]

I thought of a better way to express this that might make sense to you.

In security, total transparency isn't effective. You want as much transparency as possible, but you need secrets for the system to work (usually passwords/certs/passphrases).

Now, there isn't a password/certs/passphrase in this context, so the secrecy is instead in the model.