Should we be more cautious about logging db credentials?