I once had configured a mail server to log passwords while I was figuring out how to set it up. Then, I turned on logwatch and started using it “for real”. Sometime later, while reading through the logs that logwatch was sending to gmail, I discovered that I had been emailing myself login credentials via plain-text emails.