Pulumi hides exported secret Outputs. You can break this in your code, by doing things like writing values to the console from within an apply().

Note the note here: https://www.pulumi.com/docs/intro/concepts/secrets/#how-secrets-relate-to-outputs