MaskOpts param [HZG-362] (#1705)

New maskOpts parameter to mask sensitive data

---------

Co-authored-by: Jack Green <JackPGreen@Gmail.com>

Author: shultseva

docs/modules/configuration/pages/jvm-parameters.adoc

@@ -29,3 +29,19 @@ You can use the `JAVA_OPTS` also to pass additional properties to Hazelcast:
 ----
 JAVA_OPTS=-Dhazelcast.operation.thread.count=4 bin/jet-start
 ----
+
+To mask sensitive data in logs passed via `JAVA_OPTS`, use the `maskOpts` parameter.
+`maskOpts` should contain a comma-separated list of option keys to mask.
+This parameter must be included within `JAVA_OPTS`.
+
+Usage example:
+[source,bash]
+----
+JAVA_OPTS="-Djavax.net.ssl.keyStorePassword=keypassword -Djavax.net.ssl.trustStorePassword=trustpassword -DmaskOpts=javax.net.ssl.keyStorePassword,javax.net.ssl.trustStorePassword"
+----
+This will produce logs like:
+
+[source,bash]
+----
+... -Djavax.net.ssl.keyStorePassword=**** -Djavax.net.ssl.trustStorePassword=***
+----