Add an option to scrub some sensitive headers from external json requests

We're already doing it for the cached request object in the process dictionary
so it makes sense to do it for the external json requests as well.

For compatibility, allow reverting to previous behavior using the `[chttpd]
scrub_json_request` config setting.
4 files changed