don't log passwords by default, but make password logging optional