* referenced secrets take precedence over supplied values in `value.yaml`
* test existing secrets by setting `debug.secretRef` to `true`
* this is a temporary solution as `ct install` doesn't have pre-install step