[11.4] Don't expose confidential information in commit message list See merge request gitlab/gitlabhq!2643