Prevent sensitive vars leaking by default

[brettminnie]

• [x] Add no_log to anything that uses adjoin_domains in a loop as verbose output leaks credentials to the console