mongosh adds a --oidcDumpTokens flag with two possible values, --oidcDumpTokens=redacted and --oidcDumpTokens=include-secrets. When used with this flag, mongosh will print tokens with extra debugging information. This should only be used for debugging. If the value include-secrets is chosen, this flag will include credentials that can potentially be used to authenticate to database servers, so this variant should not be chosen when the output of mongosh is potentially visible to unauthorized people.