Mark sensitive config options as secret.

Avoid these values inadvertently leaking into logs.

Change-Id: Iec3a683f8aeca265143ac450f5153f3d10dba1c5