Support sensitive flag

[aprice]

I'm trying to use poise-service to configure a service that receives sensitive data (credentials) via environment variables. Unfortunately, even passing sensitive to the poise_service resource, it still outputs the service config to the Chef log with the credentials in plain text. This is using Upstart but I think the behavior is the same with other providers.