"Secret scanning" is not a new concept in cybersecurity but it's lack of remediation is a symptom of a much larger misunderstanding.