Don't EVER log passwords
Declare LOGIN commands to be anonymized in debug logging