doveconf: Hide keys that end with _secret

diff --git a/src/config/doveconf.c b/src/config/doveconf.c
index cbc33799e940a304493a9d864fc24c6c85e6f06a..70466bf7893c22444fb9495e23047a686814e4de 100644 (file)
--- a/src/config/doveconf.c
+++ b/src/config/doveconf.c
@@ -259,10 +259,12 @@ hide_secrets_from_value(struct ostream *output, const char *key,
 {
        bool ret = FALSE, quote = value_need_quote(value);
        const char *ptr, *optr, *secret;
+
        if (*value != '\0' &&
            (key_ends_with(key, value, "_password") ||
             key_ends_with(key, value, "_key") ||
             key_ends_with(key, value, "_nonce") ||
+            key_ends_with(key, value, "_secret") ||
             str_begins_with(key, "ssl_dh"))) {
                o_stream_nsend_str(output, "# hidden, use -P to show it");
                return TRUE;