Add a database-backed secret resolver (basically identical to the config one, so consider refactoring that)

Add a database-backed secret resolver (basically identical to the config one, so consider refactoring that) #372