The answer as mentioned in the comments is:

export const fn = functions.runWith({ secrets: getSecrets() }).auth.user().onCreate(...