allow to set specific secrets; add rake tasks