[ms] log after preprocessing, else we don't see the query which is actually planned (may have been modified by security insertion)

card,comment