Deploybot should not have access to all secrets/kms key.
Deploybot should not have access to all secrets/kms key.