[redact] redact passwords in config loading diffs