docs: add new security doc to best practices section (#15805)

[preview](https://coder.com/docs/@bp-security/tutorials/best-practices/security-best-practices)

---------

Co-authored-by: EdwardAngert <2408959-EdwardAngert@users.noreply.gitlab.com>
Co-authored-by: EdwardAngert <17991901+EdwardAngert@users.noreply.github.com>
Co-authored-by: Spike Curtis <spike@coder.com>

docs/admin/security/secrets.md

@@ -1,17 +1,20 @@
 # Secrets
 
-<blockquote class="info">
-This article explains how to use secrets in a workspace. To authenticate the
-workspace provisioner, see <a href="../users">this</a>.
-</blockquote>
+Coder is open-minded about how you get your secrets into your workspaces. For
+more information about how to use secrets and other security tips, visit our
+guide to
+[security best practices](../../tutorials/best-practices/security-best-practices.md#secrets).
 
-Coder is open-minded about how you get your secrets into your workspaces.
+This article explains how to use secrets in a workspace. To authenticate the
+workspace provisioner, see the
+<a href="../provisioners.md#authentication">provisioners documentation</a>.
 
 ## Wait a minute...
 
-Your first stab at secrets with Coder should be your local method. You can do
-everything you can locally and more with your Coder workspace, so whatever
-workflow and tools you already use to manage secrets may be brought over.
+Your first attempt to use secrets with Coder should be your local method. You
+can do everything you can locally and more with your Coder workspace, so
+whatever workflow and tools you already use to manage secrets may be brought
+over.
 
 Often, this workflow is simply:
 
@@ -111,3 +114,7 @@ workspace.
 
 Refer to our [HashiCorp Vault Integration](../integrations/vault.md) guide for
 more information on how to integrate HashiCorp Vault with Coder.
+
+## Next steps
+
+- [Security - best practices](../../tutorials/best-practices/security-best-practices.md)