{% if ceph_secret_uuid -%}
<secret ephemeral='no' private='no'>
   <uuid>{{ ceph_secret_uuid }}</uuid>
   <usage type='ceph'>
     <name>client.{{ service_name }} secret</name>
   </usage>
</secret>
{% endif -%}