pub fn mask_url(url: &str) -> String
Replace user:pass@ (or user@) credentials in an RTSP/HTTP URL with *** for safe logging/display.
user:pass@
user@
***