How to add group-scoped secret variable

I’d like to add some common passwords etc to our “top-level” group scope. It seems that unlike projects, I cannot put a secret variable at a group scope. Is this correct? I’m running the latest gitlab-ce (just upgraded)