more gracefully handle the case where ~/.aws_secrets does not exist