I think you're thinking of something else, but they also added "capabilities" to Hack (their main frontend language; it's a PHP fork) to make leaking data between requests or in logs painful.