Currently, the only solution to load a kubernetes secret as a volume-mounted file, is to redefine the full pod template. Do we want to ease the secrets in the CTK definition ? or leave this as advanced stuff To be discussed...