SecretType:
    | "unknown_secret_type"
    | "opaque"
    | "certificate"
    | "key_value"