Create a PEEP for dedicated credential fields

[Vayel]

Thank you for contributing to Pipenv!

The issue

#3085

The fix

Perhaps the fields username and password should only contain the name of an environment variable and not its value. Otherwise, the user can include the credentials in the Pipfile, which is a bad practice:

[[source]]
url = "https://mypypi.example.com/simple"
verify_ssl = true
name = "pypi"
username = "my#username"
password = "my/pass"

The checklist

• Associated issue
• A news fragment in the news/ directory to describe this fix with the extension .bugfix, .feature, .behavior, .doc. .vendor. or .trivial (this will appear in the release changelog). Use semantic line breaks and name the file after the issue number or the PR #.

[oz123]

Rotten. Closings.