secret [arg...]
secret returns the output of the generic secret command
defined by the secret.command configuration variable with secret.args and
args with leading and trailing whitespace removed. The output is cached so
multiple calls to secret with the same args will only invoke the generic
secret command once.