generate_config: Use eyaml to decrypt secret values