Variable: SECRET_STEP_PLACES

const SECRET_STEP_PLACES: readonly ["path", "query", "headers", "body"];

Where a step may use a secret variable when its stepPlaces lists the place: the request's path, the values of its query parameters and of its headers, and its body. A secret variable lists none by default, and stands then only where the install's own config puts it.