New plugin: prevent_credential_leaks