After looking at the screenshot that you quickly deleted , your original template was correct. so, if you restore the line
<Command Name="DownloadConfig" Value="${EnterConfigMode}${CRLF}show ${ConfigType}"/>
and then attempt a config download, and re-attach the session trace. this time you can replace the passwords with something like @@@@@@ before attaching the file.