Security cleanup

Author: NoahStapp

.evergreen/config.yml

@@ -777,14 +777,20 @@ functions:
       type: test
       params:
         working_dir: "src"
-        shell: bash
+        silent: true
         script: |
-          set +x
+          # DO NOT ECHO WITH XTRACE (which PREPARE_SHELL does)
           export AWS_ACCESS_KEY_ID=${AWS_ACCESS_KEY_ID}
           export AWS_SECRET_ACCESS_KEY=${AWS_SECRET_ACCESS_KEY}
           export AWS_SESSION_TOKEN=${AWS_SESSION_TOKEN}
-
+    - command: shell.exec
+      type: test
+      params:
+        working_dir: "src"
+        shell: bash
+        script: |
           ${PREPARE_SHELL}
+
           # This is required for pypy3.7 UTF encoding
           export LC_ALL=en_US.UTF-8
           bash ${PROJECT_DIRECTORY}/.evergreen/tox.sh ${PYTHON_BINARY} -m aws-secrets -- drivers/test