This change adds the missing `default` arg to `Config.get_secret` method, for consistency with the other `get_secret_<type>` methods that have a `default` arg. Fixes #12271