This is important for situations where the aws profile used to encrypt/decrypt secrets may be different than the one used to run the aws providers in pulumi code.