Vault stored passwords are exposed via JBoss start up logging

Issue

• We have certain system properties set to values provided through the vault in our JBoss domain, for example:

                <system-properties>
                        <property name="my.protected.system.property" value="${VAULT::Admin::Duff::1}"/>
                </system-properties>

• This private value is exposed in clear text in the start up log:

DEBUG [org.jboss.as.config] (MSC service thread 1-6) Configured system properties:
    [Server:server-one] = 
    file.encoding = UTF-8
    file.encoding.pkg = sun.io
    file.separator = /
    my.protected.system.property = clearTextValue