The pw_hash function only accepts strings as inputs. This means that if you are using the Sensitive data type for passing passwords around (e.g. from hiera-eyaml), they need to be unwrapped before passing to pw_hash.
Gives me this error:
I would expect that it should just work™