fix(security): Mark recording_servers key appconfig as private as it …

[nickvergessen]

…contains a secret

occ config:list spreed

Before

{
    "apps": {
        "spreed": {
            "enabled": "yes",
            "installed_version": "17.0.0-dev",
            "recording_servers": "{\"servers\":[{\"server\":\"http:\/\/172.17.0.3:8000\",\"verify\":false}],\"secret\":\"OMGmySECRETwasLEAKED\"}",
            "signaling_dev": "yes",
            "signaling_servers": "***REMOVED SENSITIVE VALUE***",
            "signaling_token_privkey_es256": "***REMOVED SENSITIVE VALUE***",
            "signaling_token_pubkey_es256": "***REMOVED SENSITIVE VALUE***",
            "sip_bridge_dialin_info": "***REMOVED SENSITIVE VALUE***",
            "sip_bridge_shared_secret": "***REMOVED SENSITIVE VALUE***",
            "types": "dav,prevent_group_restriction"
        }
    }
}

After

{
    "apps": {
        "spreed": {
            "enabled": "yes",
            "installed_version": "17.0.0-dev",
            "recording_servers": "***REMOVED SENSITIVE VALUE***",
            "signaling_dev": "yes",
            "signaling_servers": "***REMOVED SENSITIVE VALUE***",
            "signaling_token_privkey_es256": "***REMOVED SENSITIVE VALUE***",
            "signaling_token_pubkey_es256": "***REMOVED SENSITIVE VALUE***",
            "sip_bridge_dialin_info": "***REMOVED SENSITIVE VALUE***",
            "sip_bridge_shared_secret": "***REMOVED SENSITIVE VALUE***",
            "types": "dav,prevent_group_restriction"
        }
    }
}

Checklist

• Code is properly formatted
• Sign-off message is added to all commits
• Tests (unit, integration, api and/or acceptance) are included
• Screenshots before/after for front-end changes
• Documentation (manuals or wiki) has been updated or is not required
• Backports requested where applicable (ex: critical bugfixes)

[nickvergessen]

/backport to stable26