migrate from agenix secrets in docker to plain old .env files inside the data directories. they provide the same amount of protection