"objectRef.resource":secrets (verb:create OR verb:delete OR verb:patch OR verb:replace OR verb:update)