Constants can be configured to have their value exposed to clients. When configured in this way, any user with a session van read their value. Usually constants hold important (and sometimes secret) values used by your app, and therefore they should not be exposed to the client. Be careful when enabling this option on a constant.