Provide a way to update only specific secrets instaead of all

When using --update-secrets all secrets are updated however this might not be what you want all the time as updating the secrets also changes the information when the secret was last updated in the Web UI.

Having an additional option to match secrets by name that should be updated is reasonable imho.

Also, the secrets should be redacted in the diff view.