Ok, i tried this and it turns out we need both, the ServiceInstance and the secrets (the ServiceInstance actually only for the provider). So we need a way to identify both.