Mask blacklist words in log like api-etc

unless started  with --debug