If you want to limit damage there, I think what you said above is most relevant, never log credentials anywhere