Constant META_CLI_FLAG_EXPOSED 

pub const META_CLI_FLAG_EXPOSED: &str = "cli_flag_exposed";

Marks a Secret node whose value is interpolated into a CLI flag argument (e.g. -var "key=$(SECRET)"). CLI flag values appear in pipeline log output even when ADO secret masking is active, because the command string is logged before masking runs and Terraform itself logs -var values.