Try to wrap PIN handling with `runtime/secret`

[Foxboron]

https://pkg.go.dev/runtime/secret

It might work, it might not work. But it would be neat to try.