-
Improvement
-
Resolution: Duplicate
-
Minor
-
None
-
Future Dev
Broadly is something is a secret and force set in config.php then an admin in the GUI can't change it, so at minimum the field should be locked, but it really should be hidden so they can't unhide it either.
If this isn't palatable by default then we could make a new config.php only option which forbids unhiding of all secret admin settings, but I think this is overkill.
This should mostly solveĀ MDL-66182 and perhapsĀ MDL-65818 too.