diff --git a/syslog.conf b/syslog.conf
index 8e4f9e2..2513a38 100644
--- a/syslog.conf
+++ b/syslog.conf
@@ -7,7 +7,11 @@
 # First some standard log files.  Log by facility.
 #
 auth,authpriv.*			 /var/log/auth.log
-*.*;auth,authpriv.none		-/var/log/syslog
+
+# Everything except debug and security tokens, re-enable debug by
+# dropping '*.!=debug;', or enable /var/log/debug below
+*.*;*.!=debug;\
+	auth,authpriv.none	-/var/log/syslog
 
 #cron.*				/var/log/cron.log
 #daemon.*			-/var/log/daemon.log