Using debezium 7.5 connect docker image, setting these env variables to configure credentials for secured kafka brokers:

CONNECT_SASL_JAAS_CONFIG=org.apache.kafka.common.security...
CONNECT_CONSUMER_SASL_JAAS_CONFIG=org.apache.kafka.common.security...
CONNECT_PRODUCER_SASL_JAAS_CONFIG=org.apache.kafka.common.security...

In the container output log there are rows with plaintext passwords printed out.

For example:
{{--- Setting property from CONNECT_SASL_JAAS_CONFIG: sasl.jaas.config=org.apache.kafka.common... full jaas conf in plaintext!
}}

Note that some messages already have jaas config hidden, like this
{{sasl.jaas.config = [hidden] }}