Allow to suppress peer IP in reflog records

This change adds new configuration option to suppress peer IP address
in reflog entry. For backwards compatibility, this option is enabled
per default, but the default can be swapped in future gerrit releases.

Bug: Issue 10810
Change-Id: I5645a4e68fb48ad155609573aea2518480074697
diff --git a/Documentation/config-gerrit.txt b/Documentation/config-gerrit.txt
index 6c785f8..a144a67 100644
--- a/Documentation/config-gerrit.txt
+++ b/Documentation/config-gerrit.txt
@@ -2296,6 +2296,12 @@
 By default unset, meaning no bug report URL will be displayed. Administrators
 should set this to the URL of their issue tracker, if necessary.
 
+[[gerrit.enablePeerIPInReflogRecord]]gerrit.enablePeerIPInReflogRecord::
+
+Record actual peer IP address in ref log entry for identified user.
+
+Defaults to true.
+
 [[gerrit.secureStoreClass]]gerrit.secureStoreClass::
 +
 Use the secure store implementation from a specified class.