/varz should not expose potentially sensitive configs

Currently /varz dumps all configuration flags. As we add security support, it's possible some flags may be sensitive such that we wouldn't want to expose them via the web UI. Let's add a new FLAG_TAG(sensitive) which would make /varz redact that flag.