use secrets encoded with rouault/mapserver repos key (instead of mapserver/mapserver)