Need a corresponding command to delete "default" secrets created by #159. Also introduce the ability to create/generate individual secrets either with defaults or through a spec.