@Test
  public void describeConfigRedactsJvmArguments() {
    String connectCommand = new CommandStringBuilder("connect")
        .addOption("locator", "localhost[" + locatorPort + "]")
        .addOption("user", "viaStartMemberOptions")
        .addOption("password", PASSWORD + "-viaStartMemberOptions")
        .getCommandString();

    String describeLocatorConfigCommand = new CommandStringBuilder("describe config")
        .addOption("hide-defaults", "false")
        .addOption("member", "test-locator")
        .getCommandString();

    String describeServerConfigCommand = new CommandStringBuilder("describe config")
        .addOption("hide-defaults", "false")
        .addOption("member", "test-server")
        .getCommandString();

    GfshExecution execution =
        gfshRule.execute(connectCommand, describeLocatorConfigCommand,
            describeServerConfigCommand);
    assertThat(execution.getOutputText()).doesNotContain(PASSWORD);
  }
This test class expects a "security.json" file to be visible on the member classpath. The
security.json is consumed by {@link ExampleSecurityManager} and should contain each
username/password combination present (even though not all will actually be consumed by the
Security Manager).

<p>
Each password shares the string below for easier log scanning.
geode-assembly/src/acceptanceTest/java/org/apache/geode/management/internal/cli/commands/LogsAndDescribeConfigAreFullyRedactedAcceptanceTest.java