Keeping secrets

Still don't quite understand extensions/extended resources, but might as well finish out the RMs.

RM#4892
RM#4893
nova consumes this attribute. I think we'll have to do some wafflehausing based on tenant, eh?