Fixed and added. Though I realised as part of fixing it that when merging security policies that use secrets on the Gateway, the secret has to exist in the Route using it as well. I have added a note in the documentation for it. Will try and see if I can fix that subsequent to this change merging in.
Originally posted by @rajatvig in #7918 (comment)