use regex vs list to weed out password fields
use regex vs list to weed out password fields

 - also warn as module SHOULD have no_log
 - make password regex exportable for testing
 - avoids boolean fields

thaim/ansible,thaim/ansible