True when a config/JSON key names a credential-bearing value.
Matching is deliberately fail-closed: a key whose normalized form merely
contains a credential fragment (for example signature_field_label) is
treated as sensitive, because over-redacting an export is safer than
leaking one.
True when a config/JSON key names a credential-bearing value.
Matching is deliberately fail-closed: a key whose normalized form merely contains a credential fragment (for example
signature_field_label) is treated as sensitive, because over-redacting an export is safer than leaking one.