credentials:
  oauth2_proxy_cookie_secret:
    description: "Secret used by OAuth2 Proxy to encrypt session cookies (16 bytes hex-encoded)"
    algorithm: "sha256"
    validation: "^[a-f0-9]{32}$"