`apiKey` and `appKey` in provider are not masked in diff output

[nesl247]

When creating a Datadog provider, and running a diff on a project that includes this provider, the diff includes the apiKey and appKey in plain text. These should be masked IMO.