use pillar for sensitive data