Cannot reference a secret from another namespace with secretKeyRef

I'm trying to solve stackspin#1279 (closed), but as it turns out that functionality is not working as intended.

By default, we currently try to read the stackspin-single-sign-on-variables from the flux-system namespace, but because we typically don't install Nextcloud in that namespace, we can't refer to it that way (the secretKeyRef does not support using a different namespace).

Solution: use a secret in the same namespace. IMO this chart should generate that secret when you set it in the values.yaml