SSIS Password Expose In SQL Agent Job Script??

Hi..

Isn't this a bug?



Step 1) Create a package with ProtectionLevel = EncryptAllwithPassword or EncryptSensitivewithPassword, and set password in package.



Step2) In SQL Server Agent, Create a Job to call a package.



Step 3) IN SQL Server Agent, Scripting Job. In script, package password shows up...





---------------------------------------------------------------------------------------------------------------------------

USE [msdb]
GO
... ...


@os_run_priority=0, @subsystem=N'SSIS',
@command=N'/FILE "D:PackageWithPassword.dtsx" /DECRYPT "P@ssw0rd" /MAXCONCURRENT " -1 " /CHECKPOINTING OFF',
@database_name=N'master',
@flags=0
IF (@@ERROR <> 0 OR @ReturnCode <> 0) GOTO QuitWithRollback
EXEC @ReturnCode = msdb.dbo.sp_update_job @job_id = @jobId, @start_step_id = 1
IF (@@ERROR <> 0 OR @ReturnCode <> 0) GOTO QuitWithRollback
EXEC @ReturnCode = msdb.dbo.sp_add_jobserver @job_id = @jobId, @server_name = N'(local)'
IF (@@ERROR <> 0 OR @ReturnCode <> 0) GOTO QuitWithRollback
COMMIT TRANSACTION
GOTO EndSave


... ...