Currently it is possible to do something like:
import os
print(os.environ['SUPER_SECRET'])
and this will happily expose our secrets in plain text.
I know that it is not foolproof but I would feel a lot better if Datalore could sanitize outputs to replace known secret values with placeholder text (e.g. ****
).