censor often-senstive info out of v1.0 event streams

* build config params, where private env vars are often set
* input/output sources/params, which may also contain credentials

[#78775746]