my take on not exposing secrets

the idea is the default behavior is to not expose secrets.  There are times, though, when it is a handy feature to get the app itself to write out a compete config file.  

this PR adds the ```--admin.expose_secrets``` command line option and adds a ```secret``` attribute to the Options class.  If ```--admin.expose_secrets``` is NOT on the command line, then ```--admin.print_conf```, ```--admin.dump_conf``` & ```--help``` will always an Option's value as "****************" if that Option has the attribute ```secret == True```.

why check for both? Feels like only `.value` here should matter.