SecretSpec separates secret declaration from provisioning, allowing applications to declare their...