allow to use secrets in yoke security for the case of not so critical apps and run middleware on context to avoid blocking the event loop