make sure commands are not logging credentials

Added a second bucket for options. 
One contains all the options for the executable command.
The other contains the options that we are allowed to log only. 

Added tests to verify that