Allow secret reference without alternate action call

[Alexander Huck]

currently when referencing secrets, we need to add an alternate action call. This should be optional and the lib should return an error to the user stating he should:

1. either create the secret or
2. add an alternate action call

[Lukas Jarosch]

This was already working (lol). I've just refined the error message.