API keys stay out of the logs
- What was broken
- When an app rejected a sync, the error it sent back was logged with its API key in plain sight.
- What I changed
- The log cleaner now also spots keys in that escaped form and hides them.
- Why it matters
- Logs people share for help no longer leak the keys to their apps.