do not use `*password*` just use asterisks for masking passwords