A customer wants to ensure that log drain output from Heroku Shield apps is also compliant and does not expose PHI. What architectural controls and log drain configuration are required?