https://ones.com/blog/masking-sensitive-data-log4j-java-developers-guide/