Secret keys have to be provided by environment variables.

Best way to do this is to set environment variables (secrets but also DJANGO_SETTINGS_MODULE etc.) in the postactivate hook of virtualenv.