If suppress_secrets is set, use hide secret value boxes in %pM printing

diff --git a/src/lib/util/print.c b/src/lib/util/print.c
index 76e9e600c7ab62e7abf51f1abfdd44092593b6bb..b8041fc313dd3e3bc4ab4babc8a0abfbad7de492 100644 (file)
--- a/src/lib/util/print.c
+++ b/src/lib/util/print.c
@@ -790,7 +790,11 @@ static char *fr_vasprintf_internal(TALLOC_CTX *ctx, char const *fmt, va_list ap,
                                        goto do_splice;
                                }
 
-                               subst = fr_value_box_list_aprint(NULL, in, NULL, &fr_value_escape_double);
+                               if (suppress_secrets) {
+                                       subst = fr_value_box_list_aprint_secure(NULL, in, NULL, &fr_value_escape_double);
+                               } else {
+                                       subst = fr_value_box_list_aprint(NULL, in, NULL, &fr_value_escape_double);
+                               }
                        }
                                goto do_splice;