Mask Headers Option in Download Tool

[CiaranA]

Hi all, 

I'm trying my best to think of the most secure way to do this and struggling within Alteryx using the Download tool in its current format. 

I am using an Internal API Manager to retrieve data but this particular API requires additional "Headers" values for username and pw beyond my standard OAuth2 flow to the API Manager. Now I can run this locally but in order to save this down to our network as a workflow or to ideally run it from Gallery I should not be leaving credentials in open text anywhere so that anyone looking at the workflow or the underlying xml can grab these creds. Surely quite an easy one to mask or can this be made more dynamic to retrieve credentials from a Key Vault for example? e.g. Azure Key Vault?

Can we add masking to the Download Tool Header Values?

Thanks,

Ciaran