Avoid printing database passwords

It can happen that when db-sync reports some information, it can also print some passwords - for example when running geodiff fails, it would also print full connection string to the database, including `password=abcdefg` bit. It would be good to replace actual passwords with e.g. `xxxxxxxxxx` so it is safe to post db-sync output