Obfuscate proxy passwords in mirror configuration

Currently in the mirror configuration, the http and https proxy are treated as normal text fields. Because proxy settings can contain a username and password, this poses a minor security issue (minor because a mirror config can only be set by the repository owner). It would be better if we treated these fields as password fields if they contain content.