Are Secrets not available to use in customization projects? I've tried creating the xml-file manually and then updating the object from the sandbox. I've tried different combinations of allowing suiteapps and testaccounts.