obviously not that critically concerned if leaking sensitive information like this was required by the spec as drafted, and has remained uncorrected.