Second write-only secrets; DocuSign Connect key stored encrypted

Shipped

November 8, 2026 at 3:02 AM UTC

Author

Kamo

Commit

3b6179c

- CONFIG_SECRET catalog fields are encrypted into configJson on save, kept when left blank, never echoed: the list view and every change-log snapshot strip them, and the view lists savedSecrets by field id. - The DocuSign Connect verifier reads the HMAC key decrypted, falling back to a key saved in plain text before this change.