Quarkus LDAP Security - on loglevel DEBUG, the username & password are dumped
**Describe the bug**
The debug log dumps passwords. Maybe it is a good idea to censor them, or else at least give only a hash of that password?  An example:

2020-06-16 10:47:09,259 DEBUG [io.qua.ver.htt.run.sec.BasicAuthenticationMechanism] (vert.x-eventloop-thread-14) Found basic auth header USERNAME:PASSWORD (decoded using charset UTF-8)

**Expected behavior**
The password should not be logged

**To Reproduce**
Steps to reproduce the behavior:
1.  Create a project with security based on plain authentication
2.  Change application.propêrties to set the loglevel to debug
3.  Surf, log on, enter username and password


diff --git a/extensions/vertx-http/runtime/src/main/java/io/quarkus/vertx/http/runtime/security/BasicAuthenticationMechanism.java b/extensions/vertx-http/runtime/src/main/java/io/quarkus/vertx/http/runtime/security/BasicAuthenticationMechanism.java
index 2ac35579f54..e641dc6bf33 100644
--- a/extensions/vertx-http/runtime/src/main/java/io/quarkus/vertx/http/runtime/security/BasicAuthenticationMechanism.java
+++ b/extensions/vertx-http/runtime/src/main/java/io/quarkus/vertx/http/runtime/security/BasicAuthenticationMechanism.java
@@ -139,11 +139,11 @@ public Uni<SecurityIdentity> authenticate(RoutingContext context,
                     }
 
                     plainChallenge = new String(decode, charset);
-                    log.debugf("Found basic auth header %s (decoded using charset %s)", plainChallenge, charset);
                     int colonPos;
                     if ((colonPos = plainChallenge.indexOf(COLON)) > -1) {
                         String userName = plainChallenge.substring(0, colonPos);
                         char[] password = plainChallenge.substring(colonPos + 1).toCharArray();
+                        log.debugf("Found basic auth header %s:***** (decoded using charset %s)", userName, charset);
 
                         UsernamePasswordAuthenticationRequest credential = new UsernamePasswordAuthenticationRequest(userName,
                                 new PasswordCredential(password));
['extensions/vertx-http/runtime/src/main/java/io/quarkus/vertx/http/runtime/security/BasicAuthenticationMechanism.java']