Cloned from launchpad blueprint https://blueprints.launchpad.net/python-neutronclient/+spec/limit-credentials-logging.

Description:

Currently, debug settings cause logging of the credentials in services using neutronclient. This should be limited unless explicitly requested, as credentials will be stored in log files for a long time and most likely will be still usable after many days.

Shell utilities do not need to have the redaction enabled, since debug messages are not visible by default. Even when they're enabled, they're not stored permanently and may be useful for reproducing the exact action using curl.

Further removing all tokens could be useful, but since their usage is limited in time and they're used all over different parts of the code, it's a separate, much longer task.

Specification URL (additional information):

None