Guidelines for managing pipeline secrets