added raw_args primitive, split up config into machine/config/secrets