this is currently deployed and appears to be working. please everyone have a look at it & then decide if we want to use this for the other secrets as well.
