We're looking at pushing things like wifi passwords to devices using profiles and custom attributes... as we aim to use MIST's multiple PSK option - https://www.mist.com/documentation/multi-psk/

Each device will have their own wifi password pushed as a custom attribute - but these are effectively passwords. It would be awesome if they could be tagged as secret (like a lot of CI/CD tools allow you to do) and we could log that an admin had viewed them (in the same way unlock PIN and Activation Lock Key access is logged now