arti-client: Treat list of exit ports as sensitive.

crates/arti-client/src/client.rs

@@ -7,7 +7,7 @@
 use crate::address::IntoTorAddr;
 
 use crate::config::{ClientAddrConfig, StreamTimeoutConfig, TorClientConfig};
-use safelog::sensitive;
+use safelog::{sensitive, Sensitive};
 use tor_basic_utils::futures::{DropNotifyWatchSender, PostageWatchSenderExt};
 use tor_circmgr::isolation::Isolation;
 use tor_circmgr::{isolation::StreamIsolationBuilder, IsolationToken, TargetPort};
@@ -919,7 +919,7 @@ impl<R: Runtime> TorClient<R> {
             .await
             .map_err(|cause| ErrorDetail::ObtainExitCircuit {
                 cause,
-                exit_ports: exit_ports.into(),
+                exit_ports: Sensitive::new(exit_ports.into()),
             })?;
         drop(dir); // This decreases the refcount on the netdir.
 

crates/arti-client/src/err.rs

@@ -5,6 +5,7 @@ use std::sync::Arc;
 
 use futures::task::SpawnError;
 
+use safelog::Sensitive;
 use thiserror::Error;
 use tor_circmgr::TargetPorts;
 use tor_error::{ErrorKind, HasKind};
@@ -132,7 +133,7 @@ enum ErrorDetail {
     #[error("Failed to obtain exit circuit for ports {exit_ports}")]
     ObtainExitCircuit {
         /// The ports that we wanted a circuit for.
-        exit_ports: TargetPorts,
+        exit_ports: Sensitive<TargetPorts>,
 
         /// What went wrong
         #[source]