jobs now obfuscates *all* passwords
[skip ci] readme update