See here: http://guides.rubyonrails.org/security.html
I believe the point is that you won’t need the secret, it’s all handled by Rails.