Ensure obfuscate_env_vars doesn't fail with invalid vars.

When there's an invalid entry in the .travis.yml, the API fails to
return anything unfortunately as this method fails loudly when the
secure env variable is a hash entry rather than a string.

This change puts a slightly more helpful message in place.

Alternatively we could display the first couple of characters of the line in question?