---
tags:
  - puppet
references:
  - https://www.puppet.com/docs/puppet/7/lang_data_sensitive.html
---
Cannot be used as a typedef in the class arguments because hieradata doesn't pass it as such but as a regular string.

The `unwrap` method gives access to the original data.

It doesn't encrypt anything - its only purpose is the hiding of data from logs and reports.

To use Sensitive with a template we can wrap the `template` reference in it. Such as this:
```
'/etc/dnsdist/dnsdist.conf':
    content => Sensitive(template('profile/application/dnsdist.conf.erb'));
```