Update to masked credential format

** DO NOT LAND *** until related Pro changes are ready to be merged.