pygitweb,auth: don't leak any key info into the logs, even a few digits (use id instead)