Add secure attribute and verify that it works

[twsouthwick]

I validated that adding this attribute prevents the secrets from showing up in non-secure contexts.

Before:

After:

Fixes https://devdiv.visualstudio.com/DevDiv/_workitems/edit/1914249