Replace a secret's value or note, or a sign-in's site.

Only its creator or an org admin. A sign-in's value is username, password and an optional totp_secret, replaced together; any other secret's is value. A sign-in's targets (its one https site) can change on its own, keeping the stored username and password, but only by the person who added it, signed in as themselves. Any other field but description is refused with SECRET_FIELD_IMMUTABLE.