Removes the risk of sending decrypted ejson secrets to output.
Removes the risk of sending decrypted ejson secrets to output.

Presently, if a 'kubectl apply' fails when updating EJSON secrets, it's
possible that the decrypted secrets payload can be output as part of the
error message.

This should be avoided since it can expose all secrets of your application.

This change takes a simple approach by not including the error message in
commands where it is possible to display the payload. The 'Kubectl' class
does not log messages if the sensitive flag is set to true, however the
EjsonSecretProvisioner class raises EjsonSecretError which is logged
further up the stack.

Shopify/kubernetes-deploy,Shopify/kubernetes-deploy