Allowing users to manage their own secrets would also greatly simplify the process of distributing them. Right now if I grant access to the network every user gets access to all external clients, which is less than ideal.