tl;dr use precise string matches for sensitive identifiers, rather than regex without start- and end-of-string delimiters