don't emit passwords in log files