It was this conditional that meant we didn't need to have the secrets defined (other than for the first time we ran, or needed a superuser).