According to the documentation, this parameter has been deprecated since 2004, and I assume it was left there for backwards compatibility. It can probably be removed by now.
Fixed in SVN, r28302. Tester should make sure there are no references to secure_mode remaining anywhere.
Can't find any trace of secure_mode.