fix compatibility with new mojo, requiring secrets as an array instead of secret as a string