Add secrets management for avoid to have in clear text the lab password. Could be tf vault, sealed secrets, etc