secret [arg...]
secret returns the output of the generic secret command defined by the
secret.command configuration variable with secret.args and args with
leading and trailing whitespace removed. The output is cached so multiple calls
to secret with the same args will only invoke the generic secret command
once.