move secrets to separate files in faas-db