TMS setting *systems_tms_client_secret* may need special handling during setup. It is a secret that the Tapis site administrator must provide. The secret is generated by the TMS server for the Tapis TMS client. The secret should be stored in Vault and added to the Systems k8s secret. One option may be to always have the secret present but set to an empty string if not needed (i.e. no TMS for the site).