Let confine load the library for us.
Only show the first 3 and last 3 chars of the secret in the debug log.
Dress up some assignment for readbility.
Get dependency versions from hiera as nested hash values.