static S hideCredentials(URL url) { ret url == null ? null : hideCredentials(str(url)); }

static S hideCredentials(S url) {
  try {
    if (startsWithOneOf(url, "http://", "https://") && isAGIBlueDomain(hostNameFromURL(url))) ret url;
  } catch e {
    print("HideCredentials", e);
  }
  ret url.replaceAll("([&?])(_pass|key|cookie)=[^&\\s\"]*", "$1$2=<hidden>");
}

static S hideCredentials(O o) {
  ret hideCredentials(str(o));
}