wrap xmlrpc call into a protective method that mask any occurence of the xmlrpc password. close #656