[ENH] - Add a custom logging formatter to redact sensitive information

[peytondmurray]

Feature description

See #1033 for context - it's very easy for log messages to output sensitive information. In that case, it was the database password. I think the right way to deal with this is to create a logging formatter than redacts information like this, but I'm open to other proposals.

Value and/or benefit

A log formatter would make it easier to be confident that we aren't leaking sensitive information to logs.

Anything else?

No response