Is there any method to prevent the curl password for ftp/ftps from showing up in the --trace file? I would like to have the trace option on all the time, but having password in a file is a security issue.

Some options I can think of are using certificate with FTPS, or directing the trace output into a file with ownership only permitting the owner to see. But I would like a better option, as one environment involves use of Co:Z Launcher product on z/OS mainframe which brings the curl trace output into the z/OS batch job output listing.