Use kubectl's base64decode template function (added in K8s 1.11) to decode values in Secrets. Removes external call to `base64` utility on the host system.