Tfe_variables always return empty for sensitive vars

Hi all,

I want to know how we can pull sensitive variables from other workspace using tfe_variables? right now, the value is always empty.

Thanks.

or is it a better approach to just move all sensitive variables away from Terraform and put them in Vault instead?