Account passwords being stamped in plain text during Branding??

Question

Wanted to bring something to the attention of everyone who may be using the "branding" scripts in MDT 2012 (Latest version) during OS Deployment.  It appears that these scripts take the username and password of the account used to join the
domain and adds them to the branding keys in plain text.
If you're not familiar, the key is HKLM\Software\Microsoft\MPSD\OSD
The reg keys are:
OSDJoinAccount
OSDJoinPassword
Man am I glad I caught this prior to a major rollout.  I will be promptly reviewing and modifying these scripts to exclude this information in the registry for obvious security reasons!

Answer 1

The code in the script looks fine to me so looks like I am going to have to debug during a build to see what the issue is..
The basics of the script are defining the "include/exclude" variables like the one posted above.  The variables are then split by the semicolon character into incArray and excArray, then each TS variable is checked against the include array first
then against the exclude array before writing the reg key. 
Dim incArray : incArray = Split( includeMap & ";" & tsAppVariableName & ";" & tsAppInstall & ";" & appInstall & ";" & tsWindowsAppPackageAppVariableName & ";" & windowsAppPackageAppPrefix  , ";" )
 Dim excArray : excArray = Split( excludeMap, ";" )
 Dim tV
    For Each tV in oTSE.GetVariables()
  IF (MatchMaker( tV, incArray ) = TRUE) Then
   IF (MatchMaker( tV, excArray ) = FALSE ) Then
    Call BrandValue( tV, oTSE(tV) )
   End IF
  End IF
    Next