Allow specifying secrets-file in template