Merge pull request #3256 from TimMoore/issue-3249-hide-auth-in-source-warning

Strip credentials from ambiguous source warnings.
Change AnonymizableURI to Source::Rubygems::Remote.