Jonathan Tan [off-list ref] writes:
Thanks everyone. I went ahead with GIT_REDACT_AUTHORIZATION to match
GIT_REDACT_COOKIES, with the default being true (i.e. you need to set it
to "0" to have behavior change).
Hmm, I would actually have expected us to move in the direction of
deprecating specific REDACT_BLAH and consolidate them into one,
instead of adding another one. Especially as the primary reason why
we redact cookies is to protect those that are used for auth anyway.