Add 'log-requests' option to disable request logging

[jimmypw]

Provide a new command line switch --log-requests that controls weather or not requests to the http handler are logged. I think this is necessary to prevent the application logs from being used as a potential denial of service vector.... I read the log wrong. To prevent the privacy implication of associating IP's with secret retrieval.

By default --log-requests=true and the existing behaviour is maintained. ots will continue to log requests. An administrator may opt in and disable request logging by passing --log-requests=false to ots.

Other logging remains unaffected.

[Luzifer]

Thanks for the addition. In my case anonymization of IPs is done in another way but for other setups that's a good way to prevent logging PII (and to keep log-spam low for really big instances)…