params could be logged so never use it for passwords. Also add code to raise an error if passwords are used in that field. References #30874