Add default secret if environment variable not set