I can go either way on this.  I understand that there is risk in adding args and options.  I made a preliminary stab at identifying stuff that might be sensitive, hence the filtering/obfuscating of password, settings, and pythonpath args.  The resulting command_opts for a create_user call look like this:

         "command_options": {
                "username": null,
                "name": null,
                "verbosity": "1",
                "traceback": null,
                "course": "edX/Open_DemoX/edx_demo_course",
                "mode": "verified",
                "password": "********",
                "email": "rando9c@example.com",
                "staff": false
            },

I wasn't sure how much information researchers would need to be able to understand where a particular tracking event arose from.  If a command value of "./manage.py create_user" is enough, we could just include the 'command' above.  (And if not, we can always add the args/options later.)