just wondering if this should be using HiddenString for "secrets" ? initially asked in #12 by @pavarnos
