make sure commands are not logging credentials

Added a second bucket for options. 
One contains all the options for the executable command.
The other contains the options that we are allowed to log only. 

Added tests to verify that 

Actually i am not sure, if we need a pull request or if we should simply go with that new repository in the corespring realm