fix(secrets): keep secret material out of the synthesized cascade patch