Refactoring log-protect for hiding sensitive data in logs