prevent password from leaking in system logs