diff --git a/backend/tests/bun_jobs.rs b/backend/tests/bun_jobs.rs
index 206044f0fe..3bd9ac7f7e 100644
--- a/backend/tests/bun_jobs.rs
+++ b/backend/tests/bun_jobs.rs
@@ -442,7 +442,11 @@ export function main() {
         let job = bun_job(
             r#"
 export function main() {
-    const config: any = { url: "/x", headers: { Authorization: "Bearer sentinel-tkn" } };
+    const config: any = {
+        url: "/x",
+        headers: { Authorization: "Bearer sentinel-tkn" },
+        auth: { username: "svc", password: "sentinel-tkn" },
+    };
     const request: any = { path: "/x", _header: "GET /x HTTP/1.1\r\nAuthorization: Bearer sentinel-tkn\r\n\r\n" };
     const response: any = { status: 401, config, request };
     request.res = response;
diff --git a/backend/windmill-worker/src/common.rs b/backend/windmill-worker/src/common.rs
index 12fcc363c1..223c426ae1 100644
--- a/backend/windmill-worker/src/common.rs
+++ b/backend/windmill-worker/src/common.rs
@@ -91,7 +91,7 @@ pub const DEV_CONF_NSJAIL: &str = "";
 /// Comment-free on purpose: it is written into each job's wrapper source.
 pub const JS_ERROR_SERIALIZER: &str = r#"
 const wmErrOwnKeys = ['line', 'name', 'stack', 'column', 'message', 'sourceURL', 'originalLine', 'originalColumn'];
-const wmErrSecretKeys = /^(authorization|proxy-authorization|cookie|set-cookie|x-api-key|api[-_]?key|_header)$/i;
+const wmErrSecretKeys = /^(authorization|proxy-authorization|cookie|set-cookie|x-api-key|api[-_]?key|auth|passphrase|_header)$/i;
 const wmErrMaxExtra = 100000;
 
 function wmErrString(v) {