Remotes log should probably be stored in ".git/annex/remote.log"
instead of ".git-annex/remote.log" to prevent leaking credentials.

> The idea is to distribute the info between repositories, which is
> why it'd go in `.git-annex`. Of course that does mean that repository
> location information would be included, and if that'd not desirable
> this feature would need to be turned off. --[[Joey]] 
