Function extract_allow_patterns 

pub fn extract_allow_patterns(entries: &[SecretEntry]) -> Vec<String>

Zeroize all sensitive string fields in a Vec<SecretEntry> and drop it.

Extract allowlist patterns from a set of entries.

Entries with kind: allow are returned as raw pattern strings to be compiled into an AllowlistMatcher. They are skipped by entries_to_patterns.

Each entry contributes either its values list (when non-empty) or its pattern field (when values is absent), so both forms are supported:

# single pattern
[[secrets]]
kind = "allow"
pattern = "localhost"

# compact multi-value form
[[secrets]]
kind = "allow"
values = ["true", "false", "null", "0.0.0.0"]