Clarify that it is not necessary to provide `secure` or `root-keys` for the default repository.

(cherry picked from commit 193ea342)