Well you should ask the author for clarification, then. Each set of XF files per license already has a global salt value set. It doesn't need to be defined. If they say it does for their add-on then they can explain why that is and give guidance on what values may be considered "secure".