Yes, this is definitely related to the Thycotic plugin. Thank you for that tip. Where had you seen this mentioned before? I’ve opened https://issues.jenkins.io/browse/JENKINS-75422 but will close it if this is open elsewhere.
Normal/Jenkins-stored username+password:
Password’s first few characters revealed if I print the variables:
HUDSON_URL http://loc....
impersonation_username netspar....
impersonation_userpw S%0E-fM....
Thycotic plugin password:
HUDSON_URL http://loc....
impersonation_username svc-secops....
impersonation_userpw *** Not Va....