Prompts - They are still passed as plain text on the client side

[ryanhyma]

This is a big job to change. I have some ideas but we'll need to plan for it. It's necessary for some of the other requests.
Also a security concern.