Database password should not appear in logging