While credentials in the build log are masked, they are still displayed in clear text in the Pipeline Steps page (<build-url>/flowGraphTable) and the Stags Logs popover that can be opened on the Stage View page.

As a user of this plugin I would want the vault plugin to behave like the credentials binding plugin https://wiki.jenkins-ci.org/display/JENKINS/Credentials+Binding+Plugin and mask any passwords from the UI.

(The pipeline in my examples uses withVault(...) {...}.)