pub fn filter_secrets( secrets: &mut HashMap<String, String>, only: Option<&[String]>, exclude: Option<&[String]>, )
Filter secrets by only/exclude lists. Used for testing.