Consider redacting usernames in notice level logs

macOS uses a person's first and last name as their username by default. (I'm not sure what Windows or other unix systems do.)

This means that logs can contain a user's full name, and sometimes (at info level?) their IP address.

We should think about the risks here, particularly for users that post logs to the bug tracker.