diff --git a/cmd/mesh-controller/vault_secrets_test.go b/cmd/mesh-controller/vault_secrets_test.go
index 67001d58..6ded75a4 100644
--- a/cmd/mesh-controller/vault_secrets_test.go
+++ b/cmd/mesh-controller/vault_secrets_test.go
@@ -217,8 +217,9 @@ func TestAnAcceptedValueCrossesTheBusOnlySealedToTheVault(t *testing.T) {
 	defer holder.Unsubscribe()
 
 	var logged bytes.Buffer
+	was := log.Writer()
 	log.SetOutput(&logged)
-	t.Cleanup(func() { log.SetOutput(nil) })
+	t.Cleanup(func() { log.SetOutput(was) })
 
 	const value = "pw-of-last-year-that-must-not-show"
 	words, err := acceptIntoVault(theVault(context.Background()), provisionArgs("novox", "postgres"), value, "jochen")