ofxsGenerator: better behavior + don't set isSecret on the descriptor

parameters with secret descriptors never show up on nuke