runtime secret injection