I have a managed package with some apex code that makes a callout to a named credential. The named credential uses a username and password. This gets send in a header in the callout request as an authorization header and base64 encoded "username:password".
Testing this in my org works fine but when including the named credential in a managed package and installing to another org, the named credential works but the header comes through with a missing password: "username:*".
Why is this happening?