Merge "Hidden API: only log what we deny." into pi-dev