In rend_service_intro_has_opened, this warning: ``` log_warn(LD_REND, "Unrecognized service ID %s on introduction circuit %u.", serviceid, (unsigned)circuit->base_.n_circ_id); ``` Should use safe_str_client for the service ID. Even if it's unrecognized, it might be a service we used to offer, and the name shouldn't be logged. Patch to follow.