assertEquals("********", SystemUtil.maskSensitiveValue("credential", "user:pass"));
    }

    @Test
    public void test_maskSensitiveValue_withAuth() {
        assertEquals("********", SystemUtil.maskSensitiveValue("BASIC_AUTH", "dXNlcjpwYXNz"));
        assertEquals("********", SystemUtil.maskSensitiveValue("auth_header", "Bearer xyz"));