Rule for use of keywords like "password"

[ghedwards]

Rule for use of keywords like "password"

[cybersonic]

I have been working with other security managers and there are reg-exs for things like AWS tokens, but I think this would also cover:

passwd
password
secret
secret_token
APIToken
credential
awsKey
awsSecret

These should also be matched as prefix and postfix, eg:

DocumentAWSKey
or
awsKeyCurrent

Also it might be an idea to have an initial set and a param that we can extend per config