we do show what data got redacted, we do not show which rule was used to match it yet.

all the rules get compiled into a single regex pattern, that lets us save on iterations.