Sensitive (and all other forms of Rich Data) are filtered out by OpenVoxDB. For typical use cases and node having encrypted disk there is no need for an encrypted catalog. Only if the use of the catalog involves storage or transport where secrets could be spilled.