Today, the words that can be shadowed are only three fixed: 'password', 'key', 'secret'. So it is not enough do describe all of words that stores sensitive data, for example, variables with "token" fragment frequently stores sensitive data and is should not be plain added to logs.
Suggestion
Add a setting configuration or environment variable where the developer could declare all of words that should be shadowed before printing it in the log output.
Today, the words that can be shadowed are only three fixed: 'password', 'key', 'secret'. So it is not enough do describe all of words that stores sensitive data, for example, variables with "token" fragment frequently stores sensitive data and is should not be plain added to logs.
Suggestion
Add a setting configuration or environment variable where the developer could declare all of words that should be shadowed before printing it in the log output.