Should probably clarify I'm not talking about client passwords being logged; just the credentials required to read just about anything in the database