prefer fetch(URIish)
[FIXED JENKINS-19995] hide credentials in log/exception messages