Optional redactDefault true: every secret string (by property name at any depth) becomes <<REDACTED>>,
URLs lose their credentials, and a class instance becomes { '<<instance>>': '<constructor name>' }.
false keeps every string; the object form then keeps instances by reference (JSON and YAML
still carry the marker, because an instance cannot be serialized).
Options for exportAgentConfig and the instance methods
export()/exportJSON().