Would it be possible to extend the support for encrypted variables out from compute resource passwords to smart variables/class parameters. The aim would be to replicate/outperform the functionality offered by other ENCs for example Hiera's hiera-gpg plugin.