Not to log secrets in request header

[mayzhang2000]

IMPORTANT: If you have a general question please use Stack Overflow instead where Karate has a dedicated "tag": https://stackoverflow.com/questions/tagged/karate

If you are sure you have found a bug, please make sure you follow the instructions here: https://github.com/intuit/karate/wiki/How-to-Submit-an-Issue

Karate logs all request headers. Due to security reason, we need an option not to log sensitive data. For example app secret.

11:15:03.473 [main] DEBUG com.intuit.karate - request:
1 > POST https://xxx
1 > Accept: application/json
1 > Accept-Encoding: gzip,deflate
1 > Authorization: Intuit_IAM_Authentication intuit_appid=xxxx,intuit_app_secret=xxxj,intuit_token_type=IAM-Ticket, intuit_token=xxx,intuit_userid=xxx,intuit_realmid=xxx

[ptrthomas]

@mayzhang2000 yes this is a roadmap item: https://github.com/intuit/karate/projects/3#card-22529225 - the issue referred has some suggestions to work around: #699