redact oauth credentials