Function credential_selector 

pub fn credential_selector(value: &str) -> String

Lookup selector for API-key and Basic credentials: hex(sha256(value)). The selector is therefore a HASH, never plaintext — an indexed store of selectors leaks nothing about key material (this closes the DW-018 finding that config-seeded selectors were the raw config values).