SecretType: "unknown_secret_type" | "opaque" | "certificate" | "key_value"