services: Setting postgresql addon config to [{"name":"CLOUDRON_POSTGRESQL_URL","value":"postgres://<user>:<password>@postgresql/<db>"},{"name":"CLOUDRON_POSTGRESQL_PASSWORD","value":"<password>"},...]
services: Setting sendmail addon config to [...{"name":"CLOUDRON_MAIL_SMTP_PASSWORD","value":"<password>"}...]

Only admins and operators can see these (including AI sessions), and they can already read the environment, so this isn't an access problem.

But app logs are what people paste into forum posts and support requests, and AI sessions logs can be mined — and these lines sit in the middle of normal startup output.

Could the values be masked in those debug lines (for example "value":"***" for passwords and URL userinfo), keeping just the variable names?