pub fn redact_config(text: &str) -> Result<String>Expand description
Strip every secret out of a client config before it is packed.
Fails rather than degrades: a config we cannot parse is a config we cannot prove is clean, and the caller leaves it out of the archive entirely.