keep sensitive credentials out of logs