SecretKeys names the secret fields that ARE set. Their VALUES live only in KMS and are never returned here — the console renders a mask.
List<String> secretKeys;