Add the ability for config/param settings defined in IDL to declare themselves as redactible.

configs:
  "some.password.setting":
    description: "Do stuff, but don't reveal the setting"
    redact: true

Configs/Params with this attribute will be redacted with getting command line ops, config blobs, or getParameter calls.