Source secret values before `set -x` to prevent leaks

testing/run_integration_test.sh

 #!/usr/bin/env bash
 
+set -o allexport
+source "${PYTEST_ENVIRONMENT}"
+set +o allexport
+
+# NOTE: only set -x after sourcing secret values, otherwise they are leaked
 set -u -x
 
 echo "Using bucket:"
@@ -7,7 +12,6 @@ echo $PREPROCESSOR_RESULTS_BUCKET
 
 TEST_RESULT=0
 
-source "${PYTEST_ENVIRONMENT}"
 
 # wait as in registrar_prep.sh, not sure if necessary
 kubectl exec deployment/my-vs-release-registrar -- ./wait-initialized.sh