Standard instrumentor should redact `:password` in params

Similar to how the `Authorization` header is redacted.