1. Yes, we currently provide a simple approach to retries but are already working on providing features for idempotency.
2. All sensitive data (tokens, env vars) are encrypted on our side, however, we don't prevent users to print their values in the logs yet - it's planned in our next releases.