Implement support for secrets

We can use agenix: https://nixos.wiki/wiki/Agenix