During the start, Debezium server prints engine configuration which includes sensitive data like database password. This data are printed into the log in plain text format. We need to mask the passwords as we do in other parts of Debezium.

The problematic logging is here