Add secrets infrastructure

Fixes #9