Log apiClientAuth UUIDs in keep-web, keepproxy, etc.
(Instead of the secret, part of the secret, or nothing at all), servers that accept tokens should log the UUID of the token.Easiest way:
- API server always hands out v2 tokens, never v1
- servers log the UUID portion of v2 tokens, first few chars of v1 tokens (or nothing)
No data to display