Add option to keep keys through obfuscation

[lloeki]

What does this PR do?

Allow keys not to be redacted when they match the obfuscation regex.

Motivation

Users may want to keep keys and only redact values.

Additional Notes

Some additional fixes and coverage increase have been folded in there.

I can't recall where user-facing documentation for that is.

How to test the change?

CI