Hide passwords in all build variables

Enhancement BAM-9113 was implemented in the 3.3 release however it fails to meet all expectations.

Original use case was to mask only variables entered at time of build.

We require that specific variables can be masked based off of a selection or alternatively the ability to not include build parameters in build logs.

We supply passwords to Ant tasks through the Ant Target line however these are visible in the log, which is not desired. Alternatively we can configure a build to have the passwords statically set through the Build Variables section however these are visible when a user builds a customized job and we cannot limit the visibility of this through permissions, or limit a user's ability to build a customized job vs non.

The Mask Passwords plugin for Hudson is ideal for us but we are trying to move off of Hudson to Bamboo.