secret:
  command: "rbw-get"