Add support for setting secret mount mode

This will allow setting defaultMode on secret mounts. This should be backwards compatible with existing resources.