Store sensitive configs in secret

Change-Id: Ie7d1d5781cd301d882d73a098a4d4b21a363443f
Depends-On: Ie6a9833cdf73b076e24204d47e5898dfb24de43e

service/files/defaults.yaml

@@ -4,8 +4,6 @@ configs:
       cont: 9393
       ingress: search
     debug: false
-    user: searchlight
-    password: password
     notification_driver: messagingv2
     services:
       nova: false
@@ -15,6 +13,11 @@ configs:
       # do not enable this service until it has no ccp plugin
       swift: false
 
+secret_configs:
+  searchlight:
+    user: searchlight
+    password: password
+
 sources:
   openstack/searchlight:
     git_url: https://git.openstack.org/openstack/searchlight.git