Add support for secret headers

[codymullins]

Add support for secret headers, for example, if adding an Authorization header - you don't always need or want the value to be visible. These should be treated as secrets.