pub fn format_mac(mac: &[u8; 6]) -> String
Lower-case colon-separated form, which is what every event field carries.