also scrub authorization headers from expectation errors