Feature request: secret management

I've been using canary for the past week or so and I'm really enjoying it: it's definitely making my PRs way easier to review once you have a video showing it working.

# Problem

One thing I'd like to get it to do would be QA on our deployed systems, for which it'd need credentials. I'm running into a barrier where I'm not sure how to best handle this, and was hoping canary itself could setup some nice solution.

I tried an example session where I logged in to google with random credentials, and then checked the .har output and the credentials were there in plaintext (as expected).

I realise that right now I can capture with har disabled, and it's what I'm doing.
Ideally though, I'd still have the .har because it contains valuable data, and I'd also like to be able to share it with colleagues.

# Potential solve?

I think ideally it'd have an ability to hand off to a human for logging in, and stop the logging there, and resume after that part is done.
This sounds painful to implement though, I'd also be happy with hackier approaches.

----

Either way thanks for this great little tool!