Redact `client_secret` in server logs.