hey @Pablo Beltran - it depends on how you are doing your deployment, but sensors (and schedules) are run via a separate daemon, so if that daemon is isolated from the run launcher then you will need to ensure that the daemon also has access to secrets