Strip credentials from ambiguous source warnings.

Fixes #3249.
Merge pull request #3256 from TimMoore/issue-3249-hide-auth-in-source-warning

Strip credentials from ambiguous source warnings.