mask passwords in REST input config details