Values encrypted at rest Masked in API responses Reveal is audit-logged Build args ( isBuildArg ) passed into the build Runtime vars injected into the…