Move initialization of the secret to the pre_config hook. Use ap_retained_data_*() because we don't have access to process->pool there. This makes the code shorter and a lot more clear, but cannot directly be backported to 2.2 which doesn't have ap_retained_data_*().