Making them explicitly public is better than the US situation where they’re treated like a password - a password you can’t change if it gets disclosed, and that lots of people feel entitled to get.