They should be masked.
Internal note: dropping from current sprint
We do mask the credentials in the schema.prisma file stored inside of migrations folder:

but we do not mask them in the diff we generated in the README if they are hard coded:

This is fixed in 2.1.1.
Most helpful comment
This is fixed in
2.1.1.