do not show passwords in log