Added configobj-based secrets configuration, because the alternatives were too horrible to imagine.