diff --git a/internal/config/subnet/api-key.go b/internal/config/subnet/api-key.go
index 4a6cef309..8afddc32d 100644
--- a/internal/config/subnet/api-key.go
+++ b/internal/config/subnet/api-key.go
@@ -48,18 +48,21 @@ var (
 			Type:        "string",
 			Description: "[DEPRECATED use api_key] Subnet license token for the cluster",
 			Optional:    true,
+			Sensitive:   true,
 		},
 		config.HelpKV{
 			Key:         config.APIKey,
 			Type:        "string",
 			Description: "Subnet api key for the cluster",
 			Optional:    true,
+			Sensitive:   true,
 		},
 		config.HelpKV{
 			Key:         config.Proxy,
 			Type:        "string",
 			Description: "HTTP(S) proxy URL to use for connecting to SUBNET",
 			Optional:    true,
+			Sensitive:   true,
 		},
 	}
 )