Server: Handle internal vs external users better in logging (esp. redaction)

Currently, internal and external users are redacted in the same manner. Given internal users (@ns_server etc) are not really user data, we should consider finding a way to differentiate between the two types and then not redact internal users from the log files.

This will become particularly important when having to support clusters with log redaction enabled where there may be issues between the internal components.