Hi!

In order to support ephemeral resources I think Clickhouse needs to support "write only" endpoints

https://registry.terraform.io/providers/hashicorp/random/latest/docs/ephemeral-resources/password

Here's a gist with an example:
https://gist.github.com/bschaatsbergen/cec07997d0d187d8e8c7889af96a8c45