Here is a proposal to add support for masked passwords in client XML config:

This is being handled under the following Jira issues: