Update docs to reflect secret discovery nuance

[Jacob Crowther]

Currently the docs show that policies must be readable by the user. This isn't necessarily correct, although it definitely assists in providing access to secrets that are not at the top directory.

Update docs and code the reflect the following:

1. All policies will be queried as first priority.
2. If no policy is defined, individual secret policies will be queried as needed