Redact credential subject

[daniel-mader]

Description

To support GDPR-compliant logging, we introduce a feature flag UNICORE__LOG_CREDENTIAL_SUBJECT which is false by default. With the development profile, this flag shall be true by default. Manual overwrite should always be possible (true in production, false in development). This ensures that logs can be inspected to debug technical issues without leaking potentially sensitive information that are not required to resolve the technical issues.

Motivation

Enhanced privacy and compliance

Resources

No response

To-do List

• Introduce feature flag with sensible defaults across all profiles
• Implement redaction logic on the credential subject