Logging ONLY failed authentication and not correct?

[Matt]

Hi two questions.

#1 Is there a way to log only incorrect logins in radius.log and to
ignore correct logins (so as to not fill up the log file)?

#2 When I do get a login incorrect right now I get:
Auth: Login incorrect (rlm_chap: Clear text password not available):
[username at host.com/<CHAP-Password>] (from client blah.host.com port
2912 cli xxxxxxxxxxx)

Is there anyway to get the chap password that the user entered to show
up.. or is there no way to do the reverse encryption?