Is it possible to run something like `CREATE SECRET s1 (TYPE AZURE, CONNECTION_STRING '$ENV_CONN_STRING')` when duckdb is loaded, like a pre-hook?