Error during placeholder processing can expose sensitive values

[itzg]

Second of all, it leaks a part of a secret and this is a real problem here. I think that definitions.json must have a field that declare if property is a secret or not.