general_log = 1 writes every query to a file, including the passwords in them

The general query log records literal secrets; treating it as a diagnostic reduces the review.