Function redact_upload_url 

pub fn redact_upload_url(url: &str) -> String

https://fi-hel1.img.upcloud.com/uploader/session/<secret> → …/uploader/session/…: the session id IS a credential (anyone holding it can write the storage a box boots from), so it is never printed whole.