Hiding public key during service user generation

[y-tee]

I understand that we can use placeholder to put in public key but if I want to automate it using CICD, when i run plan, it will be printed out, is there any option to handle the SQL to not show the keys?

[littleK0i]

We had some dicussions about it, but ultimately decided to do nothing.

This is a big problem for passwords, but passwords are now obsolete (thankfully).

For public keys it should not be a problem, since public keys are ... well, "public" and can be exposed safely. As long as "private" key is not exposed, it should not cause any concerns.

I believe you can actually see a public key by running SHOW PARAMETERS IN USER xxx or DESC USER xxx. It is not hidden by design.