obfuscate password length when sanitizing
Merge pull request #704 from BM5k/obfuscate-password-length

obfuscate password length when sanitizing