generate secrets on start-up if none exist