diff --git a/vendor/vendor.json b/vendor/vendor.json
index a2307178e..7c1edeea3 100644
--- a/vendor/vendor.json
+++ b/vendor/vendor.json
@@ -464,8 +464,8 @@
 			"checksumSHA1": "IR7S+SOsSUnPnLxgRrfemXfCqNM=",
 			"comment": "20141209094003-92-g95fa852",
 			"path": "github.com/hashicorp/atlas-go/v1",
-			"revision": "047827faf4f20cc74f1a420fdf679d59162a09c7",
-			"revisionTime": "2017-06-05T23:14:32Z"
+			"revision": "0885342d5643b7a412026596f2f3ebb3c9b4c190",
+			"revisionTime": "2017-06-08T19:44:05Z"
 		},
 		{
 			"checksumSHA1": "cdOCt0Yb+hdErz8NAQqayxPmRsY=",
@@ -473,10 +473,9 @@
 			"revision": "7554cd9344cec97297fa6649b055a8c98c2a1e55"
 		},
 		{
-			"checksumSHA1": "SF8aIBEMV6/MXLFTgErdONaX8f0=",
+			"checksumSHA1": "nd3S1qkFv7zZxA9be0bw4nT0pe0=",
 			"path": "github.com/hashicorp/go-checkpoint",
-			"revision": "f8cfd20c53506d1eb3a55c2c43b84d009fab39bd",
-			"revisionTime": "2016-08-16T19:50:56Z"
+			"revision": "e4b2dc34c0f698ee04750bf2035d8b9384233e1b"
 		},
 		{
 			"checksumSHA1": "fSe5y1UgTDeYlnFfUcDA1zzcw+U=",
diff --git a/website/source/docs/commands/push.html.md b/website/source/docs/commands/push.html.md
index bf7b1aa00..f8a36ba8c 100644
--- a/website/source/docs/commands/push.html.md
+++ b/website/source/docs/commands/push.html.md
@@ -44,6 +44,11 @@ configuration using the options below.
   `hashicorp/precise64`, which follows the form `<username>/<buildname>`. This
   must be specified here or in your template.
 
+- `-private` - A comma-separated list of variables that should be marked as
+  sensitive in the Terraform Enterprise ui. These variables' keys will be 
+  visible, but their values will be redacted. example usage:
+  `-private=supersecretpassword1,anothersecretysecret`
+
 - `-var` - Set a variable in your packer template. This option can be used
   multiple times. This is useful for setting version numbers for your build.
 
diff --git a/website/source/docs/templates/user-variables.html.md b/website/source/docs/templates/user-variables.html.md
index 88e562edd..e775dfc99 100644
--- a/website/source/docs/templates/user-variables.html.md
+++ b/website/source/docs/templates/user-variables.html.md
@@ -166,6 +166,9 @@ Results in the following variables:
 | aws_access_key | foo |
 | aws_secret_key | baz |
 
+The `-private` flag will mark as sensitive any variable, regardless of whether
+the variable has been specified via `-var` or via `-var-file`
+
 # Recipes
 
 ## Making a provisioner step conditional on the value of a variable