auth-plugins: define unsafe settings

rhodecode/authentication/plugins/auth_crowd.py

@@ -189,6 +189,7 b' class CrowdServer(object):'
 
 
 class RhodeCodeAuthPlugin(RhodeCodeExternalAuthPlugin):
+    _settings_unsafe_keys = ['app_password']
 
     def includeme(self, config):
         config.add_authn_plugin(self)

rhodecode/authentication/plugins/auth_ldap.py

@@ -334,6 +334,7 b' class AuthLdap(object):'
 class RhodeCodeAuthPlugin(RhodeCodeExternalAuthPlugin):
     # used to define dynamic binding in the
     DYNAMIC_BIND_VAR = '$login'
+    _settings_unsafe_keys = ['dn_pass']
 
     def includeme(self, config):
         config.add_authn_plugin(self)