### JDK 27, first attempt: conn* and a +prefix
flags: -XX:FlightRecorderOptions:redact-key=+db-pass;conn*,redact-argument=+--db-pass *;https://*:*@*
LEAK-ENV-TOKEN-1           RAW=clean EVENTS=0
LEAK-PROP-PASSWORD-2       RAW=clean EVENTS=0
LEAK-ARG-DBPASSWORD-3      RAW=clean EVENTS=0
LEAK-URL-PW-4              RAW=clean EVENTS=0
LEAK-ENV-CONN-5            RAW=LEAK  EVENTS=1
LEAK-PROP-DBPASS-6         RAW=clean EVENTS=0
LEAK-ARG-DBPASS-7          RAW=clean EVENTS=0
exit=2

### jfr print (JVMInformation and the DB_CONN variable)
jdk.JVMInformation {
  startTime = 01:42:44.988 (2026-10-26)
  jvmName = "OpenJDK 64-Bit Server VM"
  jvmVersion = "OpenJDK 64-Bit Server VM (27.0.1.0.2+1) for linux-amd64 JRE (27.0.1.0.2+1), built on 2026-10-21T00:00:00Z with gcc 14.2.0"
  jvmArguments = "-XX:StartFlightRecording:filename=/tmp/jfr-redaction/wrongglob.jfr -XX:FlightRecorderOptions:redact-key=+db-pass;conn*,redact-argument=[REDACTED] -Xmx256m [REDACTED] -Ddb-pass=[REDACTED] -Dapp.region=mumbai"
  jvmFlags = N/A
  javaArguments = "Workload [REDACTED] [REDACTED] [REDACTED] [REDACTED] [REDACTED] --verbose"
  jvmStartTime = 01:42:43.787 (2026-10-26)
  pid = 6681
}
  key = "DB_CONN"
  value = "LEAK-ENV-CONN-5"
### fixed: *conn* instead of conn*
flags: -XX:FlightRecorderOptions:redact-key=+db-pass;*conn*,redact-argument=+--db-pass *;https://*:*@*
LEAK-ENV-TOKEN-1           RAW=clean EVENTS=0
LEAK-PROP-PASSWORD-2       RAW=clean EVENTS=0
LEAK-ARG-DBPASSWORD-3      RAW=clean EVENTS=0
LEAK-URL-PW-4              RAW=clean EVENTS=0
LEAK-ENV-CONN-5            RAW=clean EVENTS=0
LEAK-PROP-DBPASS-6         RAW=clean EVENTS=0
LEAK-ARG-DBPASS-7          RAW=clean EVENTS=0
exit=0

### jfr print (JVMInformation)
jdk.JVMInformation {
  startTime = 01:42:49.421 (2026-10-26)
  jvmName = "OpenJDK 64-Bit Server VM"
  jvmVersion = "OpenJDK 64-Bit Server VM (27.0.1.0.2+1) for linux-amd64 JRE (27.0.1.0.2+1), built on 2026-10-21T00:00:00Z with gcc 14.2.0"
  jvmArguments = "-XX:StartFlightRecording:filename=/tmp/jfr-redaction/fixed.jfr -XX:FlightRecorderOptions:redact-key=+db-pass;*conn*,redact-argument=[REDACTED] -Xmx256m [REDACTED] -Ddb-pass=[REDACTED] -Dapp.region=mumbai"
  jvmFlags = N/A
  javaArguments = "Workload [REDACTED] [REDACTED] [REDACTED] [REDACTED] [REDACTED] --verbose"
  jvmStartTime = 01:42:47.483 (2026-10-26)
  pid = 6823
}