Obfuscate JDBC Password in query.log

[vga91]

See trello card YYFOmCxC

The customer is using a loading script that utilizes APOC.LOAD.JDBC.
When a user uses it, it generates an entry in the query.log files containing its login credential. They need to minimally obfuscate the password.

Although I provided them with the option of configuring aliases in conf/apoc.conf, they deemed this option did not meet their expectations because the password will be hard-written in the apoc.conf file and would like this not to be mentioned anywhere.

Here is their specific feedback:

Log parameters need to be included with the executed queries being logged for internal review.

Aliases can't be stored on the server due to security issues.

JDBC is used to query the internal data warehouse as a gateway to add information to the Neo4j database that was not present during its creation.

If query.log could just put ********** instead of the password in clear text in it while using APOC.JDBC.LOAD, this problem would be solved.