Hide passwords from playbook output

This patch checks the output that on_task_start() is about to show, parses it for key=value pairs where key contains 'password' or '_pw' and replaces the corresponding values with 'HIDDEN'. This lets you collect sensitive output via vars_prompt or other means without having it displayed on stdout.