We configure several secret values as a user-provided service for each app, but not all are documented. In some cases, the app may continue to function even when required values are missing, introducing a potential security risk. The app should validate that all required values are set and fail with a clear error if any are missing.
This comes out of a slack discussion.