A credential value. Debug and Display are redacted, so the spec’s
“never logged” holds by construction rather than by discipline — and it
holds for an object’s members too, which a derived Debug would print.
The stored JSON is the value itself — a string field is a string on disk, an
object field an object — which is what lets the file store’s shape follow the
field’s type with no envelope.