Hiding OAuth client secrets in Genesys Cloud Terraform state

General Discussion
1

Is there a clean way to manage OAuth client secrets with the Genesys Cloud Terraform provider without them leaking into the state file? I’ve tried using sensitive = true on the genesyscloud_oauthclient resource, but the secret still shows up in the plan output.

resource "genesyscloud_oauthclient" "my_client" {
 name = "test-client"
 secret = var.oauth_secret
 sensitive = true
}

Anyone know if this is a provider limitation or if I’m missing a config step?