Add secrets mechanism for db config