Bug 865799: use show_diff => false for secrets, and re-enable diffs globally; r=Callek