Match redacted keys via end-anchored regex

Even though custom redactions are possible, a lot of configuration can be
avoided by matching redactions via regex anchored to the end of key names, ie
- `something_password` is pretty surely going to be sensitive data.