Registers a secret, such as a password just read, so no later text shows it.
text with every registered secret and every recognized password form replaced.
A copy of value with strings redacted and fields named like secrets replaced, up to eight levels deep.
Forgets a secret that is no longer in use.
Removes secrets from log text and fields: every registered secret value, the argument of an FTP
PASScommand, the password in URL user info, and password-like query parameters.