Really don't let passwords through to the logfile

[systemed]

Currently passwords are logged if they're part of query - see #18