trace2: redact passwords from https:// URLs by default