Hide the user/password combination in smtpd's logs.