added secret-file option for bootstrapping