Add functionality that enables configurable secrets sources, with a hard-coded `env` that provides the existing environmental variable support.