https://jira.mongodb.org/browse/SERVER-78961 discusses audit log redaction in the context of encrypted data via BinData 6. For unencrypted but sensitive data like the HMAC key, we need to create a separate BinData type for signaling such values that should always be redacted.