While it's not 100% secure, you can always reassign the value of $0 first thing in your script. That's the variable that ends up controlling how your process shows up in the process listing.

The MySQL shell client, for example, is careful to "x" out your password so that it doesn't show up in a process listing. What you see is something like mysql --username=foo --password=xxxxx instead of your actual password.