How to prevent token leaking?

Related:

https://discuss.circleci.com/t/masking-secrets-in-output-logs/22231