aio logger debug logging is logging client_secret and tokens

Should this be logged? If it should be logged, perhaps we should obfuscate (print out the last N chars only, just for debugging purposes)

Start by tracing the aio logger's debug output in aio-lib-ims and identify where client_secret and tokens are included. Determine whether sensitive authentication values can appear in logs, then verify that the completed change no longer exposes them while preserving useful debugging information.

Written by the indexing model from the issue text.