I was testing my ldap config and when the changing the password it shows the change in the puppet logs and it would be nice to avoid this and just see [redacted] or like nexus3_admin_password: [old password] and [new password] or support sensitive instead of string or support both