Current filtering only keeps variables starting with "OPENSHIFT", but obviously, this is not enough... Jenkins credentials are in JENKINS_USERNAME and JENKINS_PASSWORD variables. Also need to check the other cartridges (MySQL, etc.)