These matches do not need anything bounding where they are found in a string, its perfectly fine to just catch any of these words in a string so they can be left as they are unlike the ones I commented on above.

Also I would think this would be a good rule to add to moderate, I would add it before the existing rule that way anything that looks like a secret _always_ gets anonymized. Its just a good policy.