Match redacted keys via end-anchored regex

Even though custom redactions are possible, a lot of configuration can be avoided by matching redactions via regex anchored to the end of key names, ie - `something_password` is pretty surely going to be sensitive data.