From 72456711c3b9e0a543a39c66199cc4881eb9cf50 Mon Sep 17 00:00:00 2001
From: Toshio Kuratomi <a.badger@gmail.com>
Date: Tue, 24 Apr 2018 17:30:41 -0700
Subject: [PATCH] Add note about the dangers of ANSIBLE_DEBUG (#39261)

* Add note about the dangers of ANSIBLE_DEBUG

* Wording tweaks
---
 lib/ansible/config/base.yml | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/lib/ansible/config/base.yml b/lib/ansible/config/base.yml
index 5a9c8e61d24..ddcb7d30cfd 100644
--- a/lib/ansible/config/base.yml
+++ b/lib/ansible/config/base.yml
@@ -493,7 +493,11 @@ DEFAULT_CONNECTION_PLUGIN_PATH:
 DEFAULT_DEBUG:
   name: Debug mode
   default: False
-  description: Toggles debug output in Ansible, VERY verbose and can hinder multiprocessing.
+  description:
+    - "Toggles debug output in Ansible. This is *very* verbose and can hinder
+      multiprocessing.  Debug output can also include secret information
+      despite no_log settings being enabled, which means debug mode should not be used in 
+      production."
   env: [{name: ANSIBLE_DEBUG}]
   ini:
   - {key: debug, section: defaults}