Yes, there always has to be some separation between your secrets (keys, passwords, etc.) and the non-secret parts (methods, protocols, etc.). The point of avoi

Yes, there always has to be some separation between your secrets (keys, passwords, etc.) and the non-secret parts (methods, protocols, etc.). The point of avoiding security by obscurity was that people were always tempted to make the methods, protocols, etc. secret, rather than a few small, easily-changed bits like passwords. Because you can't very well go around reprogramming entire systems, this means that the security fails in a very bad way when compromised as compared to other systems where you just reset the passwords/keys/etc.