Moved redact_secrets out of DEFAULT_CONFIG (it's on by default when unset) and into the commented sections at the bottom of config.yaml, alongside fallback_model. Users can see the option and uncomment to disable.