* use removeSecrets() instead of setting.RedactedValue() * replace with redacted value only if secret is not empty