deploy secrets per location temporarily ~/secrets/consceal for example and symlinks to there