Functions bigbluebuttonbn_get_cfg_server_url_default() and bigbluebuttonbn_get_cfg_shared_secret_default() seem to return the currently set value. This may lead to unexpected situation:

• The admin provides their own credentials (URL and the secret - e.g. the one that moodlehq has for their own sites)
• Time flies, the admin forgets or another admin takes his position
• Looking at the form now, it looks as if the URL and secret was the default one, whereas it is not. Admins can easily share such credentials by mistake, or falsely claim "we use default values" in a bug report etc.