set redacted value to last 4 characters of secret, to match how the secret type admin interface displays it (#5027)