not hard for secrets with explicit patterns and existing pipelines to detect them

Unless they're base64-encoded or compressed?