doveconf: Improve secret hiding

Hide with more wide filtering.

diff --git a/src/config/doveconf.c b/src/config/doveconf.c
index 13eb492592b356636665596d5f357a4e5522db3e..709a53188f66516fcb6c941e801ed572aace8b22 100644 (file)
--- a/src/config/doveconf.c
+++ b/src/config/doveconf.c
@@ -255,8 +255,8 @@ hide_secrets_from_value(struct ostream *output, const char *key,
        const char *ptr, *optr, *secret;
        if (*value != '\0' &&
            (key_ends_with(key, value, "_password") ||
-            key_ends_with(key, value, "_api_key") ||
-            str_begins(key, "ssl_key") ||
+            key_ends_with(key, value, "_key") ||
+            key_ends_with(key, value, "_nonce") ||
             str_begins(key, "ssl_dh"))) {
                o_stream_nsend_str(output, "# hidden, use -P to show it");
                return TRUE;