MOAD-0004 (CWE-312): CLEAN
No passwords, tokens, or LDAP credentials logged verbatim in error paths.
Auth logging limited to error messages without credential values.
