add support for secrets

The vault password is `sekrit`, and it only has a placeholder in it.  We
will re-key to a shared password before adding real secrets.
fix typo
Merge pull request #9 from djmitche/add-secrets

add support for secrets