Global name/password pairs are masked in both Jenkins Portal and logs. It will be very convenient if TFS plugin will be updated to allow the use of those instead of having to specify them on each job?

The that use of the Credentials is good in cases no need to execute TF command again during the Job, otherwise, one is needed to manage credentials in two places ...