add secret_resolver_cb option