secrets is JSON, not YAML!