Increase security by hardening access to apps passwords

Currently, when connected to https://cp.ultra.cc/ all passwords are available in plain text in responses and to any connected user.

Request: make “asking for password” for an app or service shielded behind a password confirmation of the CP account.

e.g. if I want to see my SSH password in the UI, click the button, and make it ask for my CP account password for confirmation.

Reason: increases security, right now all passwords are dumped in plain sight in responses