improve checking logging

notably, don't log input source; it can be quite verbose (and contain
sensitive information)