Follow-on from #538 - the datasette publish command needs a way of passing secrets which will be made available to plugin configuration but will not be exposed in /-/metadata.json.