@property<EOL><INDENT>def sensitive(self):<DEDENT>
return frozenset(self._sensitive)<EOL>
Retrieve a set of the "sensitive" keys, keys for which the data
should be treated as sensitive.  This will be a copy;
modifications will not affect the set.