salt.modules.cmd.run with template argument should render env values

Is your feature request related to a problem? Please describe.

I want to execute commands with sensitive informations in a secure way.

Describe the solution you'd like

I would like to be able to execute:

salt target cmd.run 'echo ${FOO}' env='{"FOO": "{{ pillar[foo] | traverse(auth:password) }}"}' template=jinja

Describe alternatives you've considered

First, I created a temporary state file like:

command-with-pillar-in-env:
  cmd.run:
    - name: "echo ${FOO}"
	- template: jinja
	- env:
	  - FOO: {{ pillar["foo"] | traverse("auth:password") }}

Then, I tried to pass the password directly in the command like with:

salt target cmd.run 'echo {{ pillar[foo] | traverse(auth:password) }}' template=jinja

Additional context

Passing the pillar directly on the command line may leak information to tools like snoopy or auditd.

Start at the salt.modules.cmd.run entry point and trace how its template and env arguments are handled. Determine how Jinja rendering should apply to environment values without requiring the secret in the command text. Done means the supplied command can expand a rendered env value while preserving the security motivation described in the issue.