# The process under test: java -Dapi.token=abc123 -Dregion=ap-south-1 ... Idle --password=hunter2 --user=ankur # with DB_PASSWORD=hunter2 in the environment. Which of those values reach the recording? === jdk26-default jvmArguments = "-Dapi.token=abc123 -Dregion=ap-south-1 -XX:StartFlightRecording:filename=" javaArguments = "Idle --password=hunter2 --user=ankur" key = "region" value = "ap-south-1" key = "api.token" value = "abc123" key = "DB_PASSWORD" value = "hunter2" === jdk27-default jvmArguments = "[REDACTED] -Dregion=ap-south-1 -XX:StartFlightRecording:filename=" javaArguments = "Idle [REDACTED] --user=ankur" key = "region" value = "ap-south-1" key = "api.token" value = "[REDACTED]" key = "DB_PASSWORD" value = "[REDACTED]" === jdk27-own-list-replaces-defaults -XX:FlightRecorderOptions:redact-argument=--user*,redact-key=region jvmArguments = "-Dapi.token=abc123 -Dregion=[REDACTED] -XX:FlightRecorderOptions:redact-argument=[REDACTED],redact-key=region -XX:StartFlightRecording:filename=" javaArguments = "Idle --password=hunter2 [REDACTED]" key = "region" value = "[REDACTED]" key = "api.token" value = "abc123" key = "DB_PASSWORD" value = "hunter2" === jdk27-plus-extends-defaults -XX:FlightRecorderOptions:redact-argument=+--user*,redact-key=+region jvmArguments = "[REDACTED] -Dregion=[REDACTED] -XX:FlightRecorderOptions:redact-argument=[REDACTED],redact-key=+region -XX:StartFlightRecording:filename=" javaArguments = "Idle [REDACTED] [REDACTED]" key = "region" value = "[REDACTED]" key = "api.token" value = "[REDACTED]" key = "DB_PASSWORD" value = "[REDACTED]" === jdk27-none-disables-redaction -XX:FlightRecorderOptions:redact-argument=none,redact-key=none jvmArguments = "-Dapi.token=abc123 -Dregion=ap-south-1 -XX:FlightRecorderOptions:redact-argument=[REDACTED],redact-key=none -XX:StartFlightRecording:filename=" javaArguments = "Idle --password=hunter2 --user=ankur" key = "region" value = "ap-south-1" key = "api.token" value = "abc123" key = "DB_PASSWORD" value = "hunter2"