sensitive configuration options should be only write only

configuration options containing passwords should be write only:

• redcap API token
• NEXMO_API_KEY
• NEXMO API_SECRET