Organization secrets work for users, too!

Whatever string appears in the Owner field of drone repo info ... is the namespace used to look up organization secrets. That will be the user for user-owned repos and the organization for org-owned repos. So drone orgsecret add username token data will make a secret that is visible to all repositories owned by username.

(it would be great if this were in the documentation)