add config opt to use `versions secret bulk`

[sebws]

relates to this issue and the workaround comment here.

it seems it would be ideal to use this command, but I think it would be a breaking change to do so by default