Logging the plaintext password would be bad