Closed as not planned
Description
We noticed that the state returned by coder state pull
includes the OIDC access token: https://registry.terraform.io/providers/coder/coder/latest/docs/data-sources/workspace#owner_oidc_access_token
While it seems reasonable to store this token for internal use, it probably shouldn't be exposed through the API/CLI. It would be easy to accidentally log or persist the token when using coder state pull
for an unrelated purpose.
Would it be possible to redact this from the data returned by this API?