Make sure we're on-spec with what we scrub by default

[nateberkopec]

From the spec:

• Values where the keyname matches 'password', 'passwd', or 'secret'.
• Values that match the regular expression of r'^(?:\d[ -]*?){13,16}$' (credit card-like).
• Session cookies.
• The Authentication header (HTTP).