s4:provision: don't log the ldap admin password - it is internal only