refactor(exec): simplify secret scrubbing and extract redaction keys (#627)