Should this be logged? If it should be logged, perhaps we should obfuscate (print out the last N chars only, just for debugging purposes)