JAVA-5311

[jyemin]

No description provided.

[dylrich]

LGTM!

[rozza]

Unfortunately its still leaks in the logs.

Search the logs for gcpEmail and you can see the property in plain text in the logs. Look for "Starting process 'Gradle Test Executor"

What I don't understand is that some are marked as redacted. eg: REDACTED:variable_name. I can't determine where / how that is done - perhaps by evergreen.

Choices seem to be:

• ensure all variables are redacted via the same mechanism.
• Turn of info logging for gradle.

[jyemin]

Ensure all variables are redacted via the same mechanism.

You're right that Evergreen is doing this for us. The point of this PR is not to rely on that redaction.

Turn of info logging for gradle.

Not ideal as it's often needed for debugging

How about instead we use environment variables, as those shouldn't be logged (see publish.sh for the signing keys)

[rozza]

Using env's sounds like a plan

[jyemin]

Superseded by #1314.