We use global parameters for storing subscription manager credentials (and they could be used for storing another sensitive data like private keys etc). We should be able to hide such values in UI so people can't read it easily.

This is meant as short-term solution. Long-term we should move to smart variables and smart class parameters and add proper password support there.