Arguments that contain secrets should allow Deferred and Sensitive values to be passed as arguments. For example in Apache::OIDCSettings * ClientID * ClientSecret * CryptoPassword This will allow looking up these values agent side from systems like Vault.