refactor(connection-form): hide the built-in password via a plugin metadata flag

refactor(connection-form): hide the built-in password via a plugin metadata flag #713