Bad idea to log extra headers that might contain access tokens and the like, isn't it?