Allow device data to be redacted in diagnostics.

[make-all]

Currently the diagnostics generator has some specific config options that are redacted to protect users from accidentally posting local key etc in issues etc. But some devices also contain sensitive data in the device output. It would be useful if this could be marked in the config, and those redacted as well.

(suggestion from #1983)