This PR adds a masking function that replaces sensitive parameters with a masking string, such that the passwords are never submitted to the client during edits. For now, the export feature (both as JSON and as commandline) do not mask the sensitive parameters. This fixes #2024