Use hiera-supplied classes
Don't want secrets.yaml committed!