supports scrubbing for JSON fields and query params
support query params that have the following formats:  [password]=, password[]=,…
         … password=, %5bpassword[]%5d=
redact keys that look like scrub fields, e.g. "password[]": "s3cret"