Custom secret manager templates stored at the account level do not resolve org.identifier and project.identifier to the project associated with the pipeline at runtime, unlike step or stage templates, which perform this resolution. Consequently, project-level restrictions and validations cannot be enforced when accessing secrets.