whitelist parameters allowed to be logged