Avoid leaking passwords in puppet apply in templates.

[ernstae]

Users may have elasticsearch.password key/value pair in the kibana::config hash and this file should be sensitized and not leaked when applying (and diff is output)

Pull request acceptance prerequisites:

• Signed the CLA (if not already signed)
• Rebased/up-to-date with base branch
• Updated CHANGELOG.md with patch notes (if necessary)
• Any relevant docs (README.markdown or inline documentation) updated (if necessary)
• Updated CONTRIBUTORS (if you would like attribution)
• Tests pass CI

[ernstae]

Closing this, since it's no longer relevant