- Should obfuscate when REMOTE_USER isn't in request.environ.