Why are my kernel names in /boot ending in *secrets?

I’m not really sure why my kernel names end in *secrets

I do run LUKS, but I also do that on another system, and there I see the kernel names. The other system is UEFI, though.