Various secrets need to be "hydrated" prior to running any kustomizations.
Specifically, each cluster will contain a secrets directory that contains
a secretGenerator directive. Various files will need to be established under
a nested .secrets directory.