secrets.yaml is an ERB file...