redact

const (
	// MinLength is the inclusive lower bound on input length for which the
	// redacted form keeps a leading clear-text prefix. Values shorter than
	// this are fully masked. Eight bytes is enough that a 4-byte prefix
	// never reveals more than half of a typical opaque token.
	MinLength = 8
	// PrefixLength is the number of leading bytes kept when the input is at
	// least MinLength long.
	PrefixLength = 4
	// Mask is appended after the visible prefix (or returned alone when the
	// input is too short to keep a prefix).
	Mask = "****"
)