An example that's explicitly called out as allowed is using logs for security purposes.