put secrets class def in the manifests where it belongs