Regarding the new String.secure feature, what do you think about censoring such strings in sprintf("%O") output? That'd make it very useful to avoid password leakage in backtraces etc. All other operations on it - especially sprintf("%q") - would continue to work as usual.