[redact] improved support for redacting sensitive client key values          - clients may specify their own redact keys