Added secret config file tier

Will be changing around some of this later on
but working towards a complete implemtation of
all tiers, and then later refining it while building
out the documentation.
Added ability override by environment
better defaulting of secret filename

better merging of environment overrides
more tests