For ease of testing, allow secrets.yml