If pmacct cannot connect to the PostgreSQL database for whatever reason, pmacct writes the credentials in plain text to the log. A bugfix has already been submitted to the official repository on GitHub by me as a merge request and accepted. Now it just needs to be merged into the Debian version in the official Debian repositories. Link to GitHub: https://github.com/pmacct/pmacct/pull/693