pub fn line(input: &str) -> String
Redact one line of log text (SPEC §8.2). Idempotent enough for repeated application.