[adriaanmulder]

Thanks for the quick response. I think this should really be explicitly stated in the docs, along with a link to VGS. The diagram didn't make it obvious to me that the "security provider" block is actually storing the secrets, rather than just converting them into tokens.

[tompic823]

Thanks for that feedback, I completely agree. I've updated the linked page to mention this more explicitly.