fix: only check for op if 1Password holds secrets

fix: only check for op if 1Password holds secrets #3740