Test: Allow merging mock secure settings

core/src/main/java/org/elasticsearch/common/settings/Settings.java

@@ -718,6 +718,10 @@ public Builder setSecureSettings(SecureSettings secureSettings) {
             if (secureSettings.isLoaded() == false) {
                 throw new IllegalStateException("Secure settings must already be loaded");
             }
+            if (this.secureSettings.get() != null) {
+                throw new IllegalArgumentException("Secure settings already set. Existing settings: " +
+                    this.secureSettings.get().getSettingNames() + ", new settings: " + secureSettings.getSettingNames());
+            }
             this.secureSettings.set(secureSettings);
             return this;
         }

core/src/main/java/org/elasticsearch/transport/TcpTransport.java

@@ -677,8 +677,8 @@ protected Map<String, Settings> buildProfileSettings() {
                 continue;
             }
             Settings mergedSettings = Settings.builder()
-                .put(defaultSettings)
-                .put(profileSettings)
+                .put(defaultSettings.getAsMap())
+                .put(profileSettings.getAsMap())
                 .build();
             result.put(name, mergedSettings);
         }

test/framework/src/main/java/org/elasticsearch/common/settings/MockSecureSettings.java

@@ -72,6 +72,18 @@ public void setFile(String setting, byte[] value) {
         settingNames.add(setting);
     }
 
+    /** Merge the given secure settings into this one. */
+    public void merge(MockSecureSettings secureSettings) {
+        for (String setting : secureSettings.getSettingNames()) {
+            if (settingNames.contains(setting)) {
+                throw new IllegalArgumentException("Cannot overwrite existing secure setting " + setting);
+            }
+        }
+        settingNames.addAll(secureSettings.settingNames);
+        secureStrings.putAll(secureSettings.secureStrings);
+        files.putAll(secureSettings.files);
+    }
+
     @Override
     public void close() throws IOException {
         closed.set(true);