Limit the number of secrets: use /etc/invirt/keytab instead of a