Since this configuration was only there to accommodate `aramis`, make it be host-specific instead, and rely on the default value otherwise.
This is the same logic as the common module, but for secrets that don't need to be shared to different hosts.