Just what it says on the tin. This is implemented by changing the `GetPackageConfig` method of `ConfigSource` to return a `PropertyMap` and ensuring that any secret config is represented by a `Secret`.