Curious how this handles the case where the agent legitimately needs a key to test something against a real API. We hit this when wiring up Zendesk and Intercom flows for the bot pipeline, and the team kept pasting tokens into prompts because the masking layer broke the integration test. Does yours proxy the call or just redact on output?