Is there any way to mask secrets that are passed between tasks? I've had some secrets that need to be base64 decoded, so it is passed to a task to do that I've had some secrets that need to be exchanged for tokens, so it is passed to a task to do the request and handle retries. In both these instances, the secret appears in the WebUI on the input/output tab. Is there a clever way to prevent this? Can I store the intermediate results as a task generated runtime environmental variable?

we store them as kubernetes secrets which you can mount to a task