Short term fixes to redact sensitive data from core puppet providers so that credentials do not appear in the console or reports.
Josh Cooper is this big enough to nominate into the PM's tech-debt list for lovejoy timeframe?
or should it be lumped in with other fixes?
Agree it should be on the list (as it's an obvious papercut for anyone trying to use Sensitive). But also we need to discuss the future of Sensitive and its cousin Encrypted.