Clear/mask passwords as well as tokens.

Library/Homebrew/extend/ENV.rb

@@ -29,7 +29,7 @@ module EnvActivation
 
   def clear_sensitive_environment!
     ENV.each_key do |key|
-      next unless /(cookie|key|token)/i =~ key
+      next unless /(cookie|key|token|password)/i =~ key
       ENV.delete key
     end
   end

Library/Homebrew/system_config.rb

@@ -207,7 +207,7 @@ class SystemConfig
         next unless key.start_with?("HOMEBREW_")
         next if boring_keys.include?(key)
         next if defaults_hash[key.to_sym] == value
-        value = "set" if key =~ /(cookie|key|token)/i
+        value = "set" if key =~ /(cookie|key|token|password)/i
         f.puts "#{key}: #{value}"
       end
       f.puts hardware if hardware