In Account Object nested credentials secrets should be an enum instead of a string

**secret is of a type string

In comparison Certificate object allows Text or Env Var or a File:**

Before 0.16 it was possible to use %{file:/whatever} expansions basically everywhere, the current design is more limiting.