[bugfix] Strip user and password information from repo.xml after installing package.