Add secret generation to postinstall