Since the `<credentials>` element was blank, this ClearPass response almost certainly doesn't actually contain the end user's password, and so it's probably fine to log the raw response.