Derives the unique set of secret-bearing config key names from the manifest.
Sorted, de-duplicated secret key names.
Derives the unique set of secret-bearing config key names from the manifest.