s3-lsa: add lsa_secret_mapping.