The ability to define an ENV var that is in fact a secret

[helgi]

The idea is to support deis config:set hello=secret --secret and it puts the value(s) into a secret that is then auto loaded into an ENV var on the application side of things. Perfect for things like DB credentials and other secret things that developers are used to having available in ENV vars

When doing deis config to see all values it should show <secret> or similar and have a flag of some sort (--secret probably) to show the secret values

This will require Kubernetes 1.2 (kubernetes/kubernetes#4710 landed)
#13 and #299 have more context.

[Joshua-Anderson]

Would deis still save the secret config in the deis database, or would it function entirely using the kubernetes secrets api?