Allow secrets to be read from files or env vars.