tweak to get secrets working
make sure /mnt/tmp gets created