The part StringUtils.substringAfterLast(PasswordClass.class.getName(), ".") was returning "PasswordClass" while objectDiff.getPropType() gives just "Password". That's why the password weren't hidden in the watchlist mails.