Report friendly errors when nodeset/secrets missing

Also, apply the as_list method to secrets (so that they, like
most lists, are optional singletons).  The validation already
supported this.

Change-Id: I76ca1d502b18f49054ce9f8bed07bfcbac9e8cee
2 files changed