[api] mask credentinals on get.