So if you potentially need to roll a secret you would just run your deployment playbook limited to the secrets task?