Ryan Clemente

> I think this is coming from [tfmask](https://github.com/cloudposse/tfmask), which gets run on any plan output. This has been in place for a long time, since before providers (and terraform) got...

> Just to clarify is this how to set `sensitive` variable? ``` variables: | aws_assume_role="${{ secrets.AWS_ASSUME_ROLE }}" aws_account="${{ secrets.AWS_ACCOUNT }}" sensitive=true ```