Extending get_safe_settings to mask passwords in URLs