Add show_response flag to expecting.

It is possible to hide in when responding secret data such as passwords,
if you turn off this flag.