Vault token is shown in plaintext in build parameters after the build.

[Albibek]

When the build is finished or in progress, the vault wrapped token used by build to fetch secrets can be viewed in plain text. Event though the token is one-time and uses wrapping it is possible to trick the agent on not using it for this single time. After that the agent will fail with the error leaving the token usabele to fetch the secrets used by build.

Proposed solution: set type=password, display=hidden on teamcity.vault.wrapped.token