avoid exposing the decrypted data in the log