--env overrides show values of potentially sensitive variables

[UnamedRus]

hide sensitive values (PASSWORD/SECRET_KEY/ACCESS_KEY/...) in override env logging

[Slach]

if you don't want to override, just modify config properly without --env

we can't recognize automatically which parameter is sensitive, which not
we can try to implements some heuristic like mask "KEY|PASSWORD" etc, but this is useless
we could try to apply lightweight ML PII classifier for whole logger, but this is overengineering inside one produce

maybe applying something like https://github.com/pii-shield/pii-shield better solution?

[UnamedRus]

we can't recognize automatically which parameter is sensitive, which not

Why not? I guess, there is not more than few dozens of security/access adjustment parameters in clickhouse-backup?