feat: optionally store secrets in etcd rather than local filesystem