Configure OpenID secrets via env variables

This is a known issue, see discussion here. It’s being worked.