Camera logins over `SslAesTransport` send their requests to `/stok=<token>/ds`, and `HttpClient` logs every URL it posts to at debug, so the session token ends up in the debug logs people paste into issues.
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>