Default to mask IP in nginx logs

Add pillar option to save IPs for debug / abuse handling