The people at Artsy have made their apps Open Source and extracted server communication credentials into closed source modules. I can imagine this could apply to the kind of software you are talking about, too.

When having the kind of software that’s being developed is a secret in itself, that’d obviously be nonsense. :)