detailed information can be used to refine the original attack to increase the chances of success.
If errors must be tracked in some detail, capture them in log messages - but consider what could occur
if the log messages can be viewed by attackers. Avoid recording highly sensitive information such as
passwords in any form. Avoid inconsistent messaging that might accidentally tip off an attacker about