Hi there!
Take a look to this work-around:
Whether you may apply it or not depends on whether you have deployment secrets or not.
I have not tried to set the secrets_filter to true AFTER executing msbuild, it may or may not help those setups needing badly secrets for deployment.
Much luck,
abdullah