pub fn redact(url: &str) -> String
Strip userinfo from a URL for logging. libavformat taught us that the password leaks on the error path if this is not applied everywhere.