mark rds password parameter as NoEcho

Not that this is a super-secret kind of usage, but might as well not share these by default in the web UI for AWS CloudFormation.