When using an OpenAPI interface to manage passwords, we may want to allow fields like password to appear in the input, but not in the results of GET requests. We could do this by adding a field secret: true, and either:
- Removing the field entirely from the GET version of a structure, or
- Allowing it to be present, but only with a placeholder value.
The decision between these two choices is ongoing inside Faraday.