Allow to set external storage credentials from secrets

As we are creating our S3 secrets from terraform, we would like to be able to read them from the secret that we are providing without having to put them into the helm configuration as well. 

I can take care of the pull request :) 