Drop secrets in favour of more config variables; get secrets from the command line/external files; greatly improve logging.