Allow secrets to be overridden by env vars.

This allows the secrets system to be used in places like Heroku,
where environment variables are preferred over configuration files.