only source secrets if they exist