Fail-safe text.html_safe
Hides password