pub fn looks_sensitive(s: &str) -> bool
True for strings that pattern-match an API key, bearer token, email, phone, or SSN.