filter winrm password from logs Add new root-level packer template option, sensitive-variables, to tell us what user variables to mark sensitive.