code: func Restrict(dependencies exec.DependencyManager, t *api.Task) exec.DependencyGetter {
  	return &dependencyGetter{
  		secrets: secrets.Restrict(dependencies.Secrets(), t),
  		configs: configs.Restrict(dependencies.Configs(), t),
  	}
  }
docs: // Restrict provides getters that only allows access to the dependencies
  // referenced by the task.