Unexpected vault behavior

[Ed Rice]

I am noticing a strange behavior when I use vault to secure a password for a playbook.  I am not sure if this happens with other vaulted info.  I wrote a playbook that does an ipa-client-join and I used vault to secure my password.  In var/log/messages, I see the command string and the username which in my play is clear text is obscured like so ************@yaddayadda.com but the password which is vaulted info comes accross in the log cleartext.  Am I missing something?

Thanks