Rename secrets-loader to secrets_loader. Move secrets_loader config to roles.