pub fn redact_output(input: &str) -> String
Apply the established always-on Local secret-redaction rules.