Add resource secret epoch metadata

README.md

@@ -76,6 +76,9 @@ The bootstrap implementation provides:
 - `geth resource create <kind> <name>`
 - `geth keychain init [--admin-key <path>]`
 - `geth keychain status`
+- `geth secret status`
+- `geth secret create <resource>`
+- `geth secret rotate <resource>`
 - `geth auth explain <subject> <resource> <capability>`
 - `geth auth grant <subject> <resource> <capability> [--grant-id <id>]`
 - `geth auth revoke <resource> <grant-id>`
@@ -95,8 +98,7 @@ The bootstrap implementation provides:
   - `geth ssh revocation list`
   - `geth ssh revocation export --out <path>`
 
-Other command groups exist as explicit stubs: `pipe`, `pubsub`, `secret`, and
-`ssh`.
+Other command groups exist as explicit stubs: `pipe`, `pubsub`, and `ssh`.
 
 ## Resource Modules