2 Commits

Author	SHA1	Message	Date
Piotr Sarnacki	6e5f225a1c	Don't reset the value if a new value is provided ... If a value is provided with a request to update the record, we should not nullify it. We don't send decrypted private values to the client, so if client provides it, it's probably pasted by the user.	2014-09-10 11:02:24 +02:00
Piotr Sarnacki	e103b291ad	Reset value when env var is changed from private to public ... When env var is changed from private to public, we didn't nullify it, so someone doing that could miss exposing it. To minimise the risk of exposing any secure info we'll now nullify the value.	2014-09-10 10:46:29 +02:00