bridge descs: Apply sensitive() to bridge identity in error log msg

Cargo.lock

@@ -3696,6 +3696,7 @@ dependencies = [
  "rand 0.8.5",
  "retry-error",
  "rusqlite",
+ "safelog",
  "scopeguard",
  "serde",
  "signature",

crates/tor-dirmgr/Cargo.toml

@@ -51,6 +51,7 @@ postage = { version = "0.5.0", default-features = false, features = ["futures-tr
 rand = "0.8"
 retry-error = { path = "../retry-error", version = "0.2.0" }
 rusqlite = { version = "0.28.0", features = ["time"] }
+safelog = { path = "../safelog", version = "0.1.2" }
 scopeguard = "1"
 serde = { version = "1.0.103", features = ["derive"] }
 signature = "1"

crates/tor-dirmgr/src/bridgedesc.rs

@@ -20,6 +20,7 @@ use futures::task::{SpawnError, SpawnExt as _};
 use futures::FutureExt;
 use tracing::{debug, error, info, trace};
 
+use safelog::sensitive;
 use tor_basic_utils::retry::RetryDelay;
 use tor_basic_utils::BinaryHeapExt as _;
 use tor_checkable::{SelfSigned, Timebound};
@@ -954,7 +955,7 @@ impl<R: Runtime, M: Mockable<R>> Manager<R, M> {
             .unwrap_or_else(|err| {
                 error!(
                     r#"bridge descriptor cache lookup failed, for "{}": {}"#,
-                    bridge,
+                    sensitive(bridge),
                     tor_error::Report(&err)
                 );
                 None