SECURITY: Escape strings in logs