Major - P3 The URI logger prints the unredacted URI, leaking usernames/passwords. This should be updated to redact them out.
e.g.
~/mongo $ ./mongodb-4.2.0-rc0/bin/mongofiles --uri "mongodb://kayadmin:abc123@localhost:27017/test?authSource=admin" get_id 'ObjectId("5d07eaa7c974cded5bdad227")' 2019-06-17T16:28:21.730-0400 connected to: mongodb://kayadmin:abc123@localhost:27017/test?authSource=admin 2019-06-17T16:28:21.733-0400 finished writing to dochub.keys.json