Lab 5.2 - Limit Pods AND Secrets

dnx

In 5.2.1 it states which allows users to get,watch, and delete pods and secrets in the prod-a namespace

However the manifest does not have 'secrets' in the list of resources.

Is this an accidental ommision, or are secrets not a resource which would be include in here, and so where is the restriction on access to the secrets?