Option to mask secret data in stdout

In cases when stdout is collected (logging system, elk, splunk) an option to mask secret data on stdout would be useful.

Start by locating the code path that writes data to stdout and review how the package exposes configuration or output options. Clarify which values count as secret data, how masking should work for logging systems such as ELK and Splunk, and what tests would demonstrate that secrets are not emitted.

Written by the indexing model from the issue text.