Hi all. I'm just getting started using Pulumi, and part of my project is using Helm resources to deploy apps into our cluster. I'm using a config secrets to pass into the some of the chart values (passwords for apps). Everytime I do a 'pulumi preview' or 'pulumi up', the value changes, resulting in the k8s Secret to be replaced along with the deployments. What am I doing wrong?