Consider supporting secrets inline

[rnc]

To avoid multiple indirections to other files, for private usage, it might be useful to support both

   pull_secret_file: xxx
   pull_secret: xxxyyy

This could also apply to the ssh_key and certificate bundle.