Terraform supports ephemeral resources and write only provider arguments. These types of resources prevent sensitive data from being stored in terraform state. This is a proposal to add support for those resources to terraform provider. For example resource would ideally have a field for value that is write only. there would also be ephemeral data source that would get value without storing it in state. Same logic would apply to other resources that have sensitive data.