In Puppet 4.9.3, a hiera-eyaml backend was added to the Hiera functionality, allowing you to store encrypted data values. So, you can now hide away all your secret values, such as passwords, certificates, and so on, rather than using plain text in your Hiera data files. Let's go through the steps you can take to get this facility up and running.