Right now we support `secretFile`, it would be interesting to support all the major secret providers directly (Vault, AWS, GCP, etc).