telepathy-glib and telepathy-qt4 currently work around old CMs by assuming that parameters matching /(^|-)password$/ are passwords, and hence should have the SECRET flag. They shouldn't need to do this; the SECRET flag has existed since telepathy-spec 0.17.2 and telepathy-glib 0.7.5.
Merged to 0.8 and master; will be in 0.8.9 and 0.9.3.
Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.