Protecting the secret from the host is a superset of protecting the secret from a workload.