To securely manage secrets the nova operator needs to gain two capabilities
first the nova operator needs to take the global secrete and generate per-service secrets
with only the info those services should have.
second, the nova-operator needs to convert to storing the rendered config secrets, not config maps.