I wonder if we should add some kind of mechanism to prevent form data from ever being logged (for compliance reasons, if a users needs/wants that).