Related: #92337. When tracing REST requests with APM, we capture HTTP headers as labels on the trace, but redact sensitive values. However, we can't know ahead of time what are all possible sensitive values. It would be better if it was possible to configure additional patterns to redact.
modules/apm/src/main/java/org/elasticsearch/tracing/apm/APMTracer.java
private static final Logger logger = LogManager.getLogger(APMTracer.class);
    
    private final Map<String, Context> spans = ConcurrentCollections.newConcurrentMap();
    private volatile boolean enabled;
    private volatile APMServices services;
    private List<String> includeNames;
    private List<String> excludeNames;
    
    private volatile CharacterRunAutomaton filterAutomaton;
    private String clusterName;
    private String nodeName;
    public void setClusterName(String clusterName) {
        this.clusterName = clusterName;