7.46Don't log secrets

Never casually log:

Authorization header
OAuth token
client secret
password

And be careful with:

PII
PHI
financial information

Prefer identifiers needed for troubleshooting, subject to security requirements.