Description of problem: 
While updating any user parameter from WebUI extra password attribute is added to the logs which is misleading as customer may think that password of that user was changed.

Version-Release number of selected component (if applicable):
Tested on Satellite 6.10, Satellite 6.11, Satellite 6.12

How reproducible:
If we update user parameter from WebUI we see password change message in the audit and production logs. 
If we update any user parameter using hammer then there would not be any password message in the audit and production logs.

~~~
User (5) update event on password [redacted], [redacted]
~~~

Steps to Reproduce:
1. Update user from Satellite WebUI 
Administer > Users > [Select User]
2. Update any parameter of that user.

Actual results:
In /var/log/foreman/production.log

~~~
User (5) update event on firstname , t
User (5) update event on password [redacted], [redacted]
~~~

Expected results:
In /var/log/foreman/production.log

~~~
User (5) update event on firstname , t
~~~

Additional info: