--secret-file support for bootstrap