I think it sounds reasonable. If the leaking happen, I should worry more about the API server is wide opened for a while, rather than a small piece of user info