run a process with sensitive configuration (passwords, access tokens) using encryption or prompting