Function substitute 

pub fn substitute(
    value: &mut Value,
    cache: &HashMap<SecretRef, String>,
) -> CliResult<()>

Substitute every secret directive in a Value from cache. Non-secret directives (${users.id}) pass through verbatim.