I meant putting ceph key in the tmp without mktemp or something alike looks awful. Predefined secret looks very bad too(you have get-or-create for such situation).