Surely there must be a way to make container secrets less dangerous?