pub fn format_auth_redacted(auth: &str) -> String
Helper that exposes the redacted auth form for tests and admin code.