Repository: intentionet/netconan (language: python)

Issue:
VPN pksecret key not being anonymized
FortiOS VPN interface pksecret not being anonymized

```
config system interface
    edit "VPN_1"
        set interface "wan1"
        set ike-version 2
        set peertype any
        set net-device disable
        set proposal aes256gcm-prfsha512
        set dhrp 21
        set nattraversal disable
        set remote-gw 1.1.1.1
        set pksecret ENC  dfdgdgfhfhhfffgfgfgs
end
```


Discussion / hints:

Fix patch:
diff --git a/netconan/default_pwd_regexes.py b/netconan/default_pwd_regexes.py
index fdc9848..9a5cdf9 100644
--- a/netconan/default_pwd_regexes.py
+++ b/netconan/default_pwd_regexes.py
@@ -49,7 +49,8 @@
 # Some of these regexes need to be updated to support quote enclosed passwords
 # which is allowed for at least some syntax on Juniper devices
 default_pwd_line_regexes = [
-    [(r"(?P<prefix>(password|passwd)( level \d+)?( \d+)?( ENC)? )(\S+)", 6)],
+    [(r"(?P<prefix>set (password|pksecret)( ENC)? )(\S+)", 4)],
+    [(r"(?P<prefix>(password|passwd)( level \d+)?( \d+)? )(\S+)", 5)],
     [(r"(?P<prefix>username( \S+)+ (password|secret)( \d| sha512)? )(\S+)", 5)],
     [(r"(?P<prefix>(enable )?secret( \d)? )(\S+)", 4)],
     [(r"(?P<prefix>ip ftp password( \d)? )(\S+)", 3)],


Test patch:
diff --git a/tests/unit/test_sensitive_item_removal.py b/tests/unit/test_sensitive_item_removal.py
index 3692215..8ac1d3d 100644
--- a/tests/unit/test_sensitive_item_removal.py
+++ b/tests/unit/test_sensitive_item_removal.py
@@ -121,9 +121,21 @@
 # TODO(https://github.com/intentionet/netconan/issues/3):
 fortinet_password_lines = [
     (
-        "password ENC {}",
+        "set password ENC {}",
         "SH2nlSm9QL9tapcHPXIqAXvX7vBJuuqu22hpa0JX0sBuKIo7z2g0Kz/+0KyH4E=",
-    )
+    ),
+    (
+        "set password {}",
+        "mysecret",
+    ),
+    (
+        "set pksecret ENC {}",
+        "SH2nlSm9QL9tapcHPXIqAXvX7vBJuuqu22hpa0JX0sBuKIo7z2g0Kz/+0KyH4E=",
+    ),
+    (
+        "set pksecret {}",
+        "mysecret",
+    ),
 ]
 
 # TODO(https://github.com/intentionet/netconan/issues/4):