only issue the secret shows up in logs... would be good if they added a keyword match to filter out anything named secret