Mark a string as representing a package name, which affects package loading.

Mark the field as sensitive, should never be logged (TODO).

Only retain this field in provisioning, clear it from the final binary.