pub fn redact(text: &str, secrets: &[String]) -> String
Mask credentials in a log line: known secret values, the user and password in a URL, signed-URL and SAS query parameters, and authorization headers.