Should we log decrypted credentials?