Allow specifying additional secret config

We should allow putting parts of the config map in a secret.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information