Debug tracing is useful during a short investigation but payloads may contain sensitive data. What is the appropriate practice?

1. Leave maximum payload logging enabled indefinitely for every integration.
2. Copy all sensitive payloads into public incident comments.
3. Use an appropriate tracing level, restrict diagnostic access, and reduce extra tracing after the investigation.
4. Disable every form of monitoring permanently.