Just redact any strings with the sensitive command sin them from the logger completely, instead of doing it at the method level. That way we can't forget about edge cases or rarely used helpers like collection.runCommand