OptionalmaskOptionaltypesWhich types to redact. Default is 'email', 'phone', and 'creditCard'. 'apiKey', 'ip', and 'jwt' are opt-in only, given their higher false-positive risk (or, for 'jwt', simply being a bearer secret rather than classic PII).
Character(s) to use for masked positions, passed through to maskText. Default is '*'.