don't expose credentials in log/exception