title: Ansible 'no_log' for specific values in debug output, not entire module
body: <p>I am studying for the RedHat Certified Specialist in Ansible Automation (EX407) and I'm playing around with the <code>no_log</code> module parameter. I have a sample playbook structured as so;</p>
  <pre><code>---
  - hosts: webservers
    tasks:
    - name: Query vCenter
      vmware_guest:
        hostname: &quot;{{ vcenter['host'] }}&quot;
        username: &quot;{{ vcenter['username'] }}&quot;
        password: &quot;{{ vcenter['password'] }}&quot;
        name: &quot;{{ inventory_hostname }}&quot;
        validate_certs: no
      delegate_to: localhost
      no_log: yes
  ...
  </code></pre>
  <p>When <code>no_log</code> is disabled, I get a lot of helpful debug information about my VM, but when <code>no_log</code> is disabled I obviously can't protect my playbooks vaulted data (in this case that is the <code>vcenter['username']</code> and <code>vcenter['password']</code> values). Enabling <code>no_log</code> cripples my playbooks debug output to just;</p>
  <pre><code>&quot;censored&quot;: &quot;the output has been hidden due to the fact that 'no_log: true' was specified for this result&quot;,
  </code></pre>
  <p>I would like to know how it is possible to censor only some of the debug output. I know this is possible because <code>vcenter['password']</code> is protected in it's output regardless of my <code>no_log</code> state. I see this in the verbose output when <code>no_log</code> is disabled;</p>
  <pre><code>&quot;invocation&quot;: {
          &quot;module_args&quot;: {
              &quot;password&quot;: &quot;VALUE_SPECIFIED_IN_NO_LOG_PARAMETER&quot;,
              &quot;username&quot;: &quot;administrator@vsphere.local&quot;
          }
  }
  </code></pre>
  <p>What are your thoughts?</p>