Authorization header value as a secret to avoid logging it).Headers type so that the values are strings except for that key:Secret:Headers type is shared between both request- and response-related code for clients and servers. Response headers should remain as is; using the Secret type only needs to apply to requests.Headers type into RequestHeaders and ResponseHeaders type be a good idea? (Maybe a generic would be better, so Headers<string> for responses, but Headers<Secret | string> for requests?)Secret on a request, just Authorization or any?