[bin] db-script add secrets to ams-user