The admin API exposes all environment variables configured for Blaze as settings. Values of settings are exposed as-is. However secret values like passwords should not be exposed. Instead they should be masked.