Make secrets available in the configuration context

Application developers may need to access secrets from within config
files so use before_configuration instead of before_initialize.