Most of the time I do not need to see the new password in the diff output.
It's just the fact that a particular entry password was changed that I am after.
It would be nice if the tool did not print passwords by default.
Printing passwords could be enabled with an explicit command line option (--print-passwords ?).
P.S. This should apply to all secured fields, of course. Not just passwords.