Mask passwords in script task commandline

As a bamboo admin, I would like the value of a password within a commandline to be masked in the metadata view.

Steps to reproduce:

1. Create a global or plan variable which contains the string 'password' (in my example 'libraryPassword')
2. Create a script/commandline task with a commandline containing a reference to the plan variable, ${bamboo.libraryPassword}
3. Start a build.
4. Open the metadata view.

The password is shown in it's unmasked version as part of the commandline, but masked on every other place (logs and the variable itself).

My work around for now is to create a second script which reads the variable as a environment variable and calls the first script.

As a new user to bamboo, this security flaw is not obvious, certianly not when the variable settings page states that any variable containing the string 'password' will be masked.