pub fn redact(line: &str) -> String
Strip credentials from one log line.
Idempotent: redacting an already-redacted line changes nothing, which matters because the exporter may re-process a file the formatter already cleaned.