hide password in payload log
support quota/limits/usage operations