Add tests for secret replacement

[bruntib]

#4633 introduces the possibility of secret substitution in server_config.json. Some tests should be added to this new feature.