A part of the password may be shown if one contains '@' sign.
vulners.com/securityvulns/securityvulns:doc:8964