But in this guide https://www.pulumi.com/learn/building-with-pulumi/secrets/ this is how it seems to work