New support for sensitive_environment in the provider config. This is good for things like OAuth tokens that you want your resources to use, but not to trigger a force new update, and not to show up in log files.
Also fixed a bug with the way sensitive environment variables were being masked in the output when they shouldn't have been.
Finally, docs were updated based on some of the new features.