Comment 7 for bug 601551

Also, the -Dhttp behavior should be fixed to never display credentials in debug output however they are encrypted.
Devs would always be able to get them back by modifying the debug code if and when the need arise.