How do we do secrets?

My first thought is that this can be passed off to Janet. You could make an API call, or pull something in from a place outside the code repo, or shell out to some decryptor. BUT this would mean the secret would be visible if you ran with --debug or sent the compiled Janet across the network.