code: func ExpandSecretSpec(s *api.Secret, node *api.NodeDescription, t *api.Task, dependencies exec.DependencyGetter) (*api.SecretSpec, error) {
  	if s.Spec.Templating == nil {
  		return &s.Spec, nil
  	}
  	if s.Spec.Templating.Name == "golang" {
  		ctx := NewPayloadContextFromTask(node, t, dependencies)
  		secretSpec := s.Spec.Copy()
  
  		var err error
  		secretSpec.Data, err = expandPayload(&ctx, secretSpec.Data)
  		return secretSpec, err
  	}
  	return &s.Spec, errors.New("unrecognized template type")
  }
docs: // ExpandSecretSpec expands the template inside the secret payload, if any.
  // Templating is evaluated on the agent-side.