When Plain starts it now tells you which settings were loaded from env variables. Includes a new Secret type so we can mask output here and elsewhere.