* refactor: Enforce expanded sensitive inputs rules (no-changelog) * refactor: Add extra exemption * fix: Add setting to `sessionToken` fields * fix: Restore for `hidden` fields * fix: More edge case exemptions * fix: One more