@[email protected] make a wrapper shell script that would read the secret and put it in the config file, then run the service in question