fixed FD leak; added syslog flag; added tunnel keys; sanitize tokens from log