re-implement hide of nuget api key in build logs, add more tests for it