I was dumping parameters from failed queries into the error log, but this is vulnerable in the case of server compromise