str_match: keyspec matching
actions: list secrets