@pat-s yes you can use drone orgsecret add subcommand to create new organization secret and yes it requires system administrator privileges. Here is the in detailed documentation for using different subcommands on orgsecret
You will find troubleshooting guide for the same over here
Hope this helps.
Thanks!