This replaces MR 22, which we agreed to reject. Instead, this MR sets the empty string as default values for the two admin secrets, but the Secret template requires that they are non-empty.