What's the best way to use secret that will work for both normal pulumi up as well as unit test?

rds_inst = aws.rds.Instance(
        rds_config['name'],
        .....
        password=rds_config['password']
    )

rds_config['password'] is a secret Above fails during unit test with below, since the secret is normally within secure field

AssertionError: Unexpected type. Expected 'dict' got '<class 'str'>'