do not reveal db password in log