Add support for encrypted secrets in debops script