pub fn command_with_secrets( secrets: &HashMap<String, String>, cmd_parts: &[String], ) -> SafeResult<Command>
Build a command with the inherited parent env (minus sensitive strips) plus vault secrets.