Implement a safe-logging facility.

Here we add the "safe logging" feature from C tor, where certain information is suppressed from the logs as "sensitive". We can do a little better than C tor, thanks to Rust's type system.

This branch doesn't yet suppress very much; we can expand it to cover more in the future.

Closes #189 (closed).