diff --git a/trove/common/cfg.py b/trove/common/cfg.py
index 63e2d6ddc7..93e26521e4 100644
--- a/trove/common/cfg.py
+++ b/trove/common/cfg.py
@@ -352,7 +352,7 @@ common_opts = [
                           'behalf of the user. This option is ignored.'
     ),
     cfg.StrOpt(
-        'backup_aes_cbc_key', default='',
+        'backup_aes_cbc_key', default='', secret=True,
         help='Default OpenSSL aes_cbc key for decrypting backup data created '
              'prior to Victoria.',
         deprecated_for_removal=True,