Sensitive flag on result

[rlees85]

Is there a reason why the sensitive flag isn't set on the result? I get that PKCS12 should be encrypted with a password that "only I know" but I have a funny use case, where I really don't need that functionality, just have two PEMs for an app that demands PKCS12.

With that in mind, would there be harm in a PR that sets the result to be sensitive?

I would also suggest making the "password" field optional too since providing just an empty string seems to work fine...