C2 Sensitive field redaction

Recorder must NOT capture cleartext values for password, phone, or credit-card fields.