can now setup project/repo CI/CD variables starting with NOMAD_SECRET_ which will automatically end up in running containers as environment variables (w/o lead NOMAD_SECRET)