box: replication shouldn't leak user password

It was possible to leak user password through setting 'replication'
configuration option in first box.cfg invocation. This happened due
to unconditional logging in load_cfg function. The patch introduces
conditional logging.

Closes #4493

(cherry picked from commit 3ce08a3e9cf0386d93ecc694aa4c4f99056ae7ca)