Several of the keycloak secrets are just **there** in env files - we should use docker secrets instead