Add support for (and prefer) secret key path config

[Firehed]

Currently, the auto-configuration path supports only a direct read of environment variables. While this is easy, it's generally accepted as more secure to mount secrets to a file instead of using an envvar, since access to that file can be more tightly controlled.