redact_secrets rewrites executed command text (corrupts Authorization headers / inline code), not just logs

# `security.redact_secrets: true` rewrites the text of *executed* commands, corrupting them (not jus