When checked, Portainer preflight, Vault preflight, and Vault read run; planned secret names are logged without creating or deleting Docker secrets. Values are not logged.