secrets.get should return a list