Warning on denial and debug on success carry the service, the caller user id (or none), and a UTC stamp; nothing beyond the user id leaks.
orchestrator-agent