Might be worth revisiting what all is redacted (and what isn't) in this pattern.
redact's pattern is broader than it looks — /password|secret|token|key/i matches substrings, so it would censor keyboard, monkey, donkey, turkey, jockey, rocket, bucket, socket, etc. Depending on the shape of your log objects this may never matter, but it's worth knowing it's not a word-boundary match.