It's OK for the buffer to be too big.

Also print out the name of the offending attribute
The attribute for Password-With-Header might be a string
Remove useless panic action