Mask PHP_AUTH_PW header in profiler