hide passwords in log