Tokens, keys, secrets and passwords are stripped from text before it gets logged or sent.
What's wrong with this entry?
A new helper strips bearer and basic authorization values and token, key, secret and password assignments out of text before it is logged or sent. Directory-sync records were also added to the telemetry field mapper, carrying a project key and session id.
dirSyncRecord
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
Related
Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.