How to securly reference secrets from a component definition