Subject: bug#17127: `call-process' circumvents password concealment w/ `read-passwd'

From: Stefan Monnier <[email-masked]>
Date: Wed, 23 Oct 2019 18:01:45 -0400

> The following patch fixes this, I think, by using post-command-hook
> instead of after-change-functions.

Actually, in theory after-change-functions should catch all cases
whereas post-command-hook might miss some (i.e. chars inserted not
while running a command, e.g. from a process filter).

So while your new code probably works fine in practice (and is a good
workaround for now) , I think the original code is "more correct" and we
should try and figure out why it didn't work: how come
after-change-functions is not run (or not correctly) by call-process?

        Stefan