ignore passwords when serializing objects to JSON
[Fixes #48044983]