how should i pass some sensitive data to agent from my api server?