A Secret manifest contains base64 data. What must the operator understand?

1. Base64 makes key rotation unnecessary
2. Base64 automatically encrypts every etcd backup
3. Base64 is encoding rather than encryption
4. Base64 protects against anyone with API read access