Running terraform plan exposes the oauth_client_secret in plain text inside the generated state. Added sensitive = true to the variable definition but the value still leaks into the JSON output. Need the secret scrubbed from the state file entirely.